The obligation to protect expressly includes maintaining competent supervision of, and effective control over, the critical telecommunications asset. Home Affairs' guidance reads competent supervision as knowing and understanding what is happening across all components of the asset, and effective control as having the practical ability to act to protect networks and other assets, directly or by instructing a third party.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.