There is an inventory of the assets relevant to information processing, OT included, holding all attributes needed for management and maintenance and covering remote assets, cloud environments and assets regularly connected to the network but not under the entity's control; its completeness and accuracy are verified periodically at intervals matching the frequency of change.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.