Advanced control principles for it asset management (required, with baseline and intermediate, of an AI whose inherent risk is high). Supply chain risk is reviewed before acquiring mission-critical information systems and components; tools or processes track, update, prioritise and report on the asset inventory; tools detect and block unauthorised changes to software and hardware (in 2.0 with alerts on malicious activity for follow-up).
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.