Management maintains an up-to-date inventory of technology assets, hardware, software, information and connections, classified by sensitivity and criticality under policies that govern inventory and classification from inception through the life cycle wherever the assets are stored, transmitted or processed, and uses the classification to set the controls that protect each asset, to find vulnerabilities such as unauthorised software, and to identify the assets holding sensitive customer information that need additional protection and legal compliance.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.