The security assessment should take into account the threat scenarios in Table A.2, together with any others set by government authorities, management or the security professionals doing the assessment. They are: an intruder seizing an asset, conveyances included (to damage or destroy it, to use it or the goods to harm a target elsewhere, to cause civil or economic disruption, or to take hostages or kill); exploiting the supply chain to smuggle (weapons, terrorists); tampering with information (getting local or remote access to the chain's information systems to disrupt operations or enable unlawful acts); cargo integrity (tampering, sabotage or theft for terrorist ends); unauthorized use (running operations within the chain to enable a terrorist attack, including turning a vehicle or vessel into a weapon); and other scenarios.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.