The asset owner shall control the applications used for remote access to the IACS, allowing only approved ones with the security capabilities the zone requires.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.