The responsible entity for a prescribed critical telecommunications asset (under the Telecommunications Security and Risk Management Program Rules 2025: assets owned or operated by a carrier, or by a carriage service provider supplying at least 20,000 active services or serving a Commonwealth entity) must, so far as reasonably practicable, protect the asset for security and against hazards with a material risk of relevant impact, to ensure the confidentiality of communications carried and information on the asset and the asset's availability and integrity; this includes complying with Part 2A, maintaining competent supervision of and effective control over the asset, and any rules requirements. Good-faith performance is protected from damages claims.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.