Cybersecurity controls are selected and put in place to satisfy the requirements set under ARCHITECTURE-1f, as design decisions within the architecture.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.