The organization groups the SUC's assets into zones on the basis of risk and other criteria (criticality, function, location, required access, responsible organization) and identifies the conduits that connect the zones, so that every asset of the SUC belongs to a zone or a conduit.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.