Written procedures covering the security and integrity of equipment that processes account data exist and are known to all affected personnel, and records are kept of the testing and inspection each device undergoes before it goes into service and when it is decommissioned.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.