For autonomous DER at customer and utility sites, after the architecture, vulnerabilities (cyber, engineering design and development, deployment and operation) and impact severities, recommendations are given to the manufacturer (design for resilience), the integrator and installer (set-up), testing personnel (interconnection testing), DER users (access), ICT designers (local communications), security managers (alarming, logging and reporting), maintenance personnel (maintenance, updating and re-testing), with actions for coping while a failure or attack is under way and recovery and analysis actions afterwards.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.