Assets are given a security grade considering confidentiality, integrity, availability and legal requirements, and handled under procedures for each grade.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.