The applicant produces the PSecAC, the certification security plan, setting out how the project will satisfy what DO-326A intends, the security scope, the risk assessment and acceptability criteria, the development and assurance processes and their assurance levels, the artefacts to be produced and the coordination with the authority (content per Appendix A.1.1), and obtains the authority's agreement before relying on it.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.