The program must identify the asset's physical critical components; so far as reasonably practicable minimise or eliminate material risks and mitigate relevant impacts of physical security hazards on those components and of natural hazards (fire, flood, cyclone, storm, heatwave, earthquake, tsunami, space weather, biological health hazards) on the asset; respond to incidents of unauthorised access to physical critical components; restrict access to them to critical workers or accompanied visitors; and test whether security arrangements are effective and appropriate to detect, delay, deter, respond to and recover from a breach. The entity must have regard to whether the program describes the critical components, the physical and natural hazards and the security arrangements.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.