Control designs are analysed to find gaps where objectives are not adequately met, and new controls are introduced or existing ones modified to close the gaps.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.