The asset owner shall protect backup media and storage from unauthorized access and from the same events that would destroy the primary system (off-site or separated copies).
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.