The assets whose cybersecurity properties, if compromised, would result in a damage scenario shall be identified, drawing on the item definition, the impact rating, the threat scenarios or a ready-made catalogue. Examples: personal data held by the infotainment unit, with confidentiality as its property, or data exchanged for the braking function, with integrity as its property.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.