Management implements preventive, detective and corrective physical controls for each security zone: data centre sites chosen to limit exposure to internal, external and environmental threats, not advertised by signage, protected by guards, fences, barriers and surveillance with access to key hardware and software limited, continuous detection devices whose alarms are answered and support forensics, fire suppression, smoke alarms, raised flooring and heat and moisture sensors with continuous environmental monitoring, and the same discipline for other zones holding equipment or information.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.