Physical controls are assured, including independently, on implementation and through life. Changes in threat, technology and business are monitored within the TAG 7.1 governance, measures can be scaled up quickly (more staff, monitoring, exit searches or CCTV), physical security is part of change management, and security systems undergo examination, inspection, maintenance and testing (EIMT).
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.