Advanced control principles for infrastructure protection control (required, with baseline and intermediate, of an AI whose inherent risk is high). Access from unpatched staff-owned and third-party devices is blocked; network environments and virtual instances restrict and monitor traffic between trusted and untrusted zones; technical measures stop unauthorised code executing on owned or managed devices and system components; the institution looks for control gaps a zero-day attack could exploit.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.