Stored soft and hard copy data important to essential functions is protected. Partially achieved: only necessary copies exist, data moved to less secure systems is reduced or read-only, physical or technical protection prevents unauthorised access, modification or deletion, cryptography is applied though with limited confidence, and secured backups (possibly offline or paper) allow operation to continue. Achieved: the same with justified confidence in cryptographic protection and secured storage of necessary historic or archive data.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.