Asset classification criteria are set according to the business and all assets in scope are identified and listed, rated for importance and given security grades considering legal requirements and business impact, with the inventory kept current by periodic surveys.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.