The CBS shall where portable and mobile devices are supported, restrict them to those allowed by design and restrict code and data transfer to and from them (port blockers may be accepted for a given system). (from SR 2.3 of IEC 62443-3-3)
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.