The product has inherent resistance to attack and malware: configurable security controls are set so security is maximised while the intended use and environment are preserved, attack vectors and surface are minimised by closing ports and removing services, systems arrive secure and already hardened against misuse and attack, as HDO IT requires, users inform the manufacturer of suspected breaches and perceived weaknesses, and the software withstands attack and can respond and recover automatically; IEC 81001-5-1 governs the life cycle activities behind this.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.