The CBS shall identify and authenticate every human user who can reach the system directly or through its interfaces. (from SR 1.1 of IEC 62443-3-3)
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.