Secure device-management processes cover returned, replaced and disposed devices with instructions to third parties handling them, protection against known vulnerabilities with secure update procedures, auditable logs of changes to critical functions, procedures for merchants to detect and report tampered or missing devices, and monitoring and response to suspicious activity at merchant locations.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.