Keep and enforce an approved list of hardware, firmware and software, disable applications running executable code by default on critical systems, maintain an inventory of network-connected systems marking critical IT and OT, and document the network map and OT device configurations.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.