The technical report starts from the two parallel infrastructures, the electrical grid and the information infrastructure that automates it, and the specifics that distinguish power system security from office IT: constrained resources, asymmetric message-oriented multicast communication, millisecond timing, component lifetimes of 10 to 30 years with legacy interoperability and migration, limited connectivity to a central network, high availability with few patch windows, interconnection of independent entities and field devices in unprotected areas, so that objectives centre on authentication and integrity over confidentiality (with confidentiality returning for metering privacy); it surveys the relevant regulation and standards (NERC CIP, NIST IR 7628, ISO/IEC 27000, IEC 62443) and the TC 57 reference architecture the security architecture maps onto.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.