IoT devices (smartphones, multi-function printers, cameras, smart televisions and other connected devices) should be inventoried with the networks they connect to and their locations; the FI should assess and implement controls for IoT risks, since many devices have little built-in security; secure the network hosting them, restricting their traffic and placing them in a segment separate from systems and confidential data; prevent unauthorised access to the devices; and monitor them for suspicious activity so compromised devices can be isolated promptly.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.