SIG risk domain U, Server Security. The third party secures servers and related devices through tracked and controlled system settings, configuration management and hardening, and monitoring, evaluated together with the network and application layers.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.