Where the assessor lacks a sound technical understanding of a component or technology in the assessed system, the assessor is supported by a security assessment team with the necessary technical expertise and knowledge; the team should be diverse and skilled enough to help understand and interpret the evidence.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.