The program strategy and its priorities are written down and tied to the organisation's mission, its strategic objectives and the risk it poses to critical infrastructure.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.