Any other person who substantially modifies a product and makes it available is a manufacturer. It takes on Articles 13 and 14 for the part affected by the modification, or for the whole product if the modification affects the cybersecurity of the product as a whole. A substantial modification is a post-market change that affects compliance with Annex I Part I or changes the intended purpose assessed.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.