Where the Secretary believes the entity could not comply with a vulnerability assessment notice, or it has not, a designated officer (Home Affairs or ASD) may be asked to undertake the assessment; the entity must then provide, as the Secretary's notice requires, access to premises, access to computers and reasonable assistance and facilities.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.