Network products and services must meet mandatory national standards, must not contain malicious programs, and providers must remedy security flaws/vulnerabilities and inform users (and report) in a timely manner.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.