The plan must require that IAC cyber assets are managed through a formal system development lifecycle that incorporates IAC security considerations, defines and documents security roles and responsibilities throughout the lifecycle, and integrates the IAC risk management process with lifecycle activities.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.