The plan must require periodic reviews validating that the monitoring program's detection mechanisms are configured to the baseline configuration and that its processes and activities are executed as the plan requires.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.