350.0-G-3 sec.6.5: selecting the appropriate security options for the mission and documenting the decision and residual risk.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.