Security controls are applied to systems that have remote access (Table B4, 16.1: manipulation of remotely operated functions such as remote key, immobiliser and charging pile, 16.2: manipulation of telematics, 16.3: interference with short range wireless systems or sensors).
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.