An entity must manufacture a relevant connectable product in compliance with the requirements of the security standard for its class where the entity is aware, or could reasonably be expected to be aware, that the product will be acquired in Australia in the circumstances the rules specify (for the first standard, acquisition by a consumer), and must comply with any other requirements of the standard that apply to the manufacturer, such as publishing information about the product. The obligation reaches every entity for the connection, use and attack-protection matters of s 15(6) and otherwise constitutional corporations and entities in interstate or international trade.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.