Where the assessed entity has configured services, applications or hardware using vendor or ASD technical guidance, the report details any deviations from that guidance with their explanation and business justification.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.