Control: when the organization places equipment away from its own premises, that equipment should sit within a protected area. Purpose: to provide equipment located at another carrier's site securely. Guidance: define the demarcation point and interface with the host carrier so the equipment can readily be cut off when needed; agree with the host carrier how supporting utilities will be supplied; and have management confirm the location is suitable for the security level sought. So that the host carrier's premises are as secure as the organization's own, an agreement and a set of rules for reaching the intended security level should be verified in advance.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.