Governance for the cybersecurity architecture, such as an architecture review process, is established and maintained, including periodic reviews and a process for exceptions, to prevent drift between documented and implemented architecture.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.