Security controls are applied to back-end systems to minimise unauthorised access, with OWASP named as a source of example controls (Table C1, threats 1.2 and 3.3: unauthorised internet access through backdoors, unpatched system software, SQL attacks or other means).
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.