Recommended settings and defaults for the security capabilities so they are implemented per E26 and integrator specifications (accounts, authorisation, password policy, safe machinery state, firewall rules), serving as the basis for verifying item 29.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.