The organisation requires the developer to provide defined training on the correct use and operation of the implemented security and privacy functions, controls and mechanisms. No enhancements.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.