Agencies must certify the physical security of any facility that contains network infrastructure, to the level of the highest classification of information that infrastructure carries.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.