The applicant performs the system security risk assessment on the developed system: confirms the security measures address the identified threat scenarios, evaluates residual level of threat and risk acceptability, and records vulnerabilities and their treatment, consistent with the system safety assessment.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.