The FI must implement one or more malware protection measures on every system to mitigate malware infection, where such measures are available and can be implemented; the FAQ notes measures may be needed at endpoints, the email gateway and the internet gateway.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.