Configure systems to provide only necessary functions (ports, protocols, services); set procedures for security in maintenance (approval of maintenance staff, work procedures, tools and replacement parts for remote and on-site maintenance); retire or replace end-of-support hardware and software in a planned and safe way, taking compensating measures where supported versions cannot be adopted and planning and executing migration to supported software; and protect against malware, for example with anti-malware and automatic updates of signatures and behaviour profiles, protection against malicious code (JavaScript, ActiveX, VBScript, PowerShell), detection, quarantine and blocking of malicious email and links, and control of connections to malicious websites, unapproved social media and file-sharing services.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.