For a change to a certified aircraft or system the applicant analyses the security impact of the modification: whether it alters the security scope, perimeter or environment, introduces interconnectivity with new or modified systems and networks, installs, replaces or modifies aircraft systems (including TSO articles), and whether the existing security risk assessment and measures remain valid, taking service history into account, to decide whether an aircraft-level or a system-level security risk assessment is required. DO-326B / ED-202B updates DO-326A to add guidance on analysing the security impact of changes (SC-216 terms of reference); that text is not held.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.