Requirement 0203 (Part Six: Physical, section 25.2 Physical Security Measures and Controls; applies to All entities; dated 31 October 2024; retained from Release 2025): The appropriate container, safe, vault, cabinet, secure room or strong room is used to protect entity information and resources based on the applicable Security Zone and business impact level of the compromise, loss or damage to information or physical resources. SCEC Class A, B and C containers for classified information; AS 3809 commercial safes and vaults for valuable non-classified resources (Table 42); secure rooms per ASIO Technical Notes 7-06, 8-06 and 9-06.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.