Requirement 0206 (Part Six: Physical, section 25.4.3 Physical Security Measures and Controls; applies to All entities; dated 31 October 2024; retained from Release 2025): Access by visitors to Security Zones One to Five is controlled in accordance with the physical security measures and controls for access control for visitors. Zone Three and above: need-to-know (and clearance in Zones Four and Five), visitor passes, detailed auditable records, close escort (constant line of sight in Zones Four and Five), groups of at most five recommended.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.