Establish physical security perimeters, access controls, surveillance, and environmental protection for all in-scope locations, with controls scaled to the highest protection need within each zone.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.