Criteria designate physical protected areas (controlled, restricted and reception areas) to protect personal and important information, documents, media and key equipment and systems from physical and environmental threats, and areas are designated with protection measures for each.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.