The ANSP may sit in a General Maintenance or General Procedures Manual section, must reference the D301 authorisation, may point to interfacing IT, training and airport documents (which the FAA may review), and is stored and handled securely as sensitive security information. It includes plans and procedures for: a description of the security environment; roles and responsibilities with the persons holding authority; training and qualifications; control of portable software, data loading devices and ground support equipment access and use; control of access to the airport's wired and wireless service network; control of access to the loadable software airplane part librarian; secure part signing processes and control of access to private keys; control of aircraft conformity to type design; parts pooling and borrowing; part exchanges within the operator's own fleet; event recognition, response, reporting and recovery; and event evaluation with program improvement.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.