The roles and activities needed for the function's cybersecurity program, such as security and network administrators, are identified at least in an ad hoc way.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.