Printed components are placed in blind mailers or authenticable tamper-evident packaging the moment they are printed, so that only approved custodians can see them and any tampering is evident; the printer serves this purpose only, has a local connection only, is kept under dual control and sits in a secure room. In particular: the room's walls are solid from floor to ceiling; windows are locked, alarmed and covered, opaque or placed so nobody can see in; an electronic access control system requires two people to enter, prevents anti-passback breaches and raises an alarm if a single person remains inside longer than 30 seconds; CCTV captures all activity, including in darkness using infrared or automatic floodlights, and motion-triggered recording runs on for a minute or more after movement stops; monitoring is continuous so that authorised staff resolve alarms around the clock; the CCTV server and storage are held in a separate secure location that those with room access cannot enter; cameras cover the entrance, any safes and any equipment in use; cameras are placed so that no PIN pad, keyboard or combination lock used for authentication is visible; CCTV footage is archived securely for 45 days or longer, with enough capacity and redundancy to rebuild the latest 45 days.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.