On a reasoned request, the manufacturer must give the market surveillance authority, in a language it understands, all information and documentation needed to show that the product and processes conform to Annex I, and must cooperate on measures to eliminate the product's cybersecurity risks.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.