Controls stop, and reveal, any attempt by one person acting alone to load unencrypted secret or private keys or components. They cover physical entry to the room, logon to the loading application, video surveillance of the injection room, and control over physical access to components and shares.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.