The plan must require that IAC cybersecurity requirements are included in contracts with suppliers and stated plainly to the vendors in the IAC technology supply chain.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.