Database systems are managed and operated properly as is customary; separated as far as reasonably possible from other systems; updated regularly including the software they need; systems whose manufacturer no longer supports security may not be used without an appropriate security solution.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.