Per TSA SD: segmentation. Requirements include (a) OT/IT Network Segmentation + (b) Access Control + privileged access + (c) maintain documented network architecture.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.