Plan and prepare the assessment: engage the assessor, agree objectives, and obtain system documentation including the system security plan.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.