The plan must require periodic testing of the design effectiveness and the operating effectiveness of both technical and procedural controls used by the monitoring program's detection mechanisms.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.