The asset owner shall manage the resources the IACS depends on (compute, network, power, personnel) so that security measures do not exhaust them and their loss is planned for.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.