The applicant produces the operator guidance: the specifications and technical and organisational requirements an operator needs to prepare, use and administer the aircraft and its systems securely, the restrictions on policies and procedures that keep the security objectives met, covering use, administration, installation, maintenance and disposal (procedural measures, key and certificate management, monitoring and auditing of security effectiveness, configuration and loading controls), feeding the Instructions for Continued Airworthiness and DO-355A / ED-204A.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.