A product with digital elements may be made available on the Union market only if, when properly installed, maintained and used as intended or under reasonably foreseeable conditions and with the necessary security updates applied, it meets the Part I essential cybersecurity requirements of Annex I, and only if the processes the manufacturer runs meet the Part II vulnerability handling requirements.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.