Because patching workload will surge and IT resources cannot grow quickly, identify priority services and systems on a risk basis and focus resources on them, giving top priority to externally accessible systems supporting critical services such as internet banking; where these are jointly operated, share understanding and fix roles and responsibilities between users and providers in advance.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.