For all Interactive Remote Access, use an Intermediate System so that the Cyber Asset initiating the access does not directly access an applicable Cyber Asset.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.