The bank keeps an up-to-date inventory of information assets, including business and customer data, applications, supporting infrastructure, key personnel and facilities, showing their business criticality; it may set its own criteria for critical assets.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.