Control performance is assessed on a schedule to confirm the controls still meet their objectives, and problem areas found by the assessments lead to new or modified controls.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.