The ST lists the management functions the TOE provides, through which administrators set the parameters that control security-relevant behaviour (data protection, TOE protection, audit and identification attributes). One component: FMT_SMF.1 Specification of management functions.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.