Sources of vulnerability information are identified and kept current, vulnerabilities are actively discovered, categorised, prioritised and analysed for relevance to the organisation, and a repository records vulnerabilities and their resolution.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.