Controls outside the virtual machines protect administrative interfaces such as web management consoles and APIs from unauthorised access, and all management sessions are controlled and monitored with audit trails so that unauthorised or suspicious sessions are detected and blocked early.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.