Development begins with a vendor orientation covering the vendor's resource availability and timeline, the SRGs applicable to the technology and the requirements cheat sheet; DISA provides the technology-specific STIG template based on the applicable SRG, the process guide and the cheat sheet, from which the vendor develops the content. If vendor resources are not immediately available the process is pushed six months and the vendor is responsible for contacting DISA to restart it.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.