Manufacturer specifications are followed with continuous monitoring of defect announcements, a procedure analyses, prioritises and schedules patches by risk, and only authorised staff maintain; R1 tests updates in a production-like pre-production environment; R2 provides rollback; further reinforcements cover firmware integrity checks and continuous threat and vulnerability monitoring.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.