The provider defines the boundary of the cloud service(s) covered by the STAR self-assessment or certification, including the service models and components in scope, so that the assurance statement accurately reflects what was assessed.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.