For the priority systems, recheck software and network configurations so that patch targets can be identified immediately when a vulnerability appears, and reduce technical debt as far as possible, for example closing unnecessary ports, removing redundant privileged accounts and applying outstanding patches; upgrade end-of-support products promptly because no patches will come.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.