The program must, so far as reasonably practicable, minimise or eliminate the material risks of unauthorised access to, interference with or exploitation of the asset's supply chain; misuse of privileged access by any supply chain provider; disruption from a supply chain issue; threats to people, assets, equipment, products, services, distribution and intellectual property in supply chains; risks from major suppliers (vendors whose product or service gives them significant influence over the asset's security); and failure or lowered capacity of other entities in the supply chain; and must mitigate the relevant impact of a supply chain hazard. In adopting, reviewing or varying it the entity must have regard to whether it lists the major suppliers and describes the supply chain hazards that could have a relevant impact.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.