Management establishes a preventive maintenance plan, especially for mission-critical systems, scheduled by criticality, developer recommendations, operational risk and emerging technology and threats, aligned with business plans and timed after hours, at weekends or holidays to limit interruption, with maintenance access limited to the part of the system and the time needed and maintenance activity logs captured and reviewed to detect malicious activity during maintenance windows.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.