The asset owner shall control physical access to the IACS and its components in proportion to the risk, since physical access defeats most logical controls.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.