A defined, standardised method, planned in advance and clearly described, is used to identify cyber risks so outputs are consistent.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.