The program must treat as material risks: a stoppage or major slowdown of the asset's function for an unmanageable period; an impairment that prejudices Australia's social or economic stability or national security; substantive loss of access to, or deliberate or accidental manipulation of, a critical component (for example position, navigation and timing systems); interference with operational or information and communication technology essential to the asset's function (for example billing and charging); storage, transmission or processing outside Australia of operational information such as layout diagrams, schematics, geospatial and configuration information, operational constraints or tolerances, and confidential or sensitive data about the asset; remote access to operational control or monitoring systems; compromise, theft or manipulation of communications; unauthorised use compromising the asset's security and function, including by a major supplier, critical worker or managed service provider; and impact on the availability, integrity, reliability or confidentiality of a data storage system holding business critical data.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.