Each STIG or SRG is published with an overview document on a fixed outline: an executive summary stating the scope, the companion STIGs and the audience; the DODI 8500.01 authority and the CNSSI 1253 relationship; the severity category code definitions; distribution; document revisions through the STIG support desk on the maintenance schedule; other considerations (testing, AO approval of unapplied settings, use outside the DOD); the product approval disclaimer; assessment considerations; concepts and terminology conventions; and general security requirements for the technology (the ASD overview's code scanners, application scanners and mobile code; the NDM overview's management network topics; the PostgreSQL STIG overview's database-specific conventions).
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.