SIG risk domain F, Physical and Environmental Security. The third party protects its facilities, secure work areas and equipment with physical access controls, environmental protections and secure workplace standards, and tests or inspects them in line with the outsourcer's requirements.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.