Baseline: integrate security risk mitigation measures into the design, construction or renovation of a facility. Enhanced: conduct an SVA for newly identified or constructed critical facilities within 12 months of designation or becoming operational, and update the facility SVA within 12 months after significant modifications.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.