The plan must require a program for managing IAC supply chain risk that deals with the risk suppliers bring to IAC essential functions, sets operational or procedural controls over buying the digital technology products and services the IAC cyber environment uses, and forms part of the wider IAC risk management program; at the Enhanced Profile it must specify safeguards against supply chain threats.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.