Network segments are logically or physically isolated and segmented securely, as needed to control the related risks, using firewalls and defence in depth.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.