The control system shall enforce a configurable limit on consecutive invalid access attempts within a time period and deny access for a configurable period or until unlocked by an administrator, with the caveat that lockout must not deny an operator access to a critical function during an emergency. It has no enhancements.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.