Run a programme for managing supply chain risk that covers cybersecurity: suppliers are given cybersecurity requirements, the requirements are communicated to them, and compliance is verified.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.