Record STIG assessment status, findings and POA&Ms in eMASS (or the applicable authorisation/GRC system) for authorisation and continuous-monitoring reporting.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.