Networked security management systems add function but give attackers, especially insiders, a route to disrupt them in a blended attack. Following national guidance on cyber assurance of physical security systems, dutyholders disable unused physical interfaces, fit tamper alarms, protect security-critical structures and management interfaces, and check device behaviour on power loss. Essential services such as backed-up power, communications, IT and air-conditioning are identified, single points of failure are found and resilience is improved by contingencies, design changes or hardening.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.