Per PAS 1192-5:2015 supply chain + physical clauses: secure supply chain + external sharing + physical sites. Requirements include (a) implement Supply Chain Security including supplier security requirements + contractual flow-down + assessment + ongoing oversight + (b) implement Sensitive Asset Information Sharing with External Parties including need-to-know basis + classification handling + contractual protection + (c) implement Physical Security of Project and Asset Sites including site access control + storage of sensitive information + secure handling of physical media + (d) maintain inventory of suppliers + external parties with access + (e) maintain documentation of sharing arrangements + (f) integrate with broader supply chain risk management.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.