Cyber identification practices: the firm identifies and manages the data, people, devices, systems, third parties and facilities that make its core business lines and critical operations possible, and understands the cybersecurity risks to those operations and lines and to the data, people, devices, systems, third parties and facilities behind them.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.