A network device shall be able to monitor and control every way in which it can be accessed over untrusted networks; RE 1 adds explicit approval of access requests. The identifier is named in the IIC SMM mapping list. See the official text for the full requirement.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.