Embedded devices (PLCs, RTUs, IEDs) shall support the capability to be updated with security patches in a manner consistent with availability requirements, including signed firmware and rollback protection.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.