The plan must require that options for auditing, assessing or validating IAC cybersecurity requirements, and how often they occur, are written into IAC supply chain procurement requirements.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.