350.0-G-3 sec.3.2: definition of mission-specific security requirements based on the threat assessment and mission sensitivity/classification.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.