All personnel involved must at least know the ANSP procedures, and IT personnel need skills for IT risk assessments traceable to industry standards, the oversight office judging adequacy. Ground support equipment specified by the design approval holder is under strict physical and configuration control, is securely wiped of confidential and aircraft information before disposal or repair, lost or unaccounted equipment is reported under ANSP procedures, and personal storage devices are prohibited for data intended for the aircraft (only operator-approved devices). On-aircraft ANSP activities, such as scheduled data integrity and software conformity checks and restoring and updating maintenance laptops and ground support equipment, belong in the maintenance program; automated security log downloads are not maintenance tasks.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.