Segment IT and OT networks and log and monitor all connections between them; limit physical access to OT and related IT equipment to authorised people, secure and log access to HMIs and other hardware, and block unauthorised media and hardware by disabling unused ports and granting access by exception.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.