Proactive recovery assessments establish what the organisation's roots of trust rest on: a clear understanding of system boundaries, trust relationships and identities (an adversary can persist through a privileged service account, a forgotten administrative account, a management tool with agents or a PKI component); proper access control over the infrastructure that manages the environment, without which an adversary can return after recovery; and sound processes and tools to validate, back up and replicate mission-critical and infrastructure management data and to monitor and detect changes at a defined frequency, establishing trust in management data first and business data second.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.