Operate IT systems securely with documented hardening baselines, patch management, change management, logging, malware protection, and capacity management for all in-scope infrastructure.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.