Dormant virtual machines are kept within patching and monitoring practice, with security patches and virus signatures enforced, using tools that patch offline machines where applicable; and when a machine is restored from an old snapshot its patch level, security settings and configuration are verified, with audit trails that trace activity on the machines, patching included.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.