Where the CSP is allowed to sub-outsource a critical or important function, or a material part of one, the written agreement specifies any parts of the function excluded from sub-outsourcing; sets the conditions to be met; states that the CSP remains accountable and must oversee the sub-outsourced services so that all contractual obligations continue to be met; obliges the CSP to tell the firm before any planned sub-outsourcing or material change to it, particularly where it might affect the CSP's ability to meet its obligations, with a notice period long enough for the firm to risk-assess and to object or approve; gives the firm the right to object or requires its explicit approval before the sub-outsourcing or change takes effect; and gives the firm the right to terminate if it objects, or in the case of undue sub-outsourcing such as proceeding without notice or seriously breaching the agreed conditions.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.