The services, reports and records a service provider delivers under interagency agreements, management control agreements or contracts are monitored and reviewed regularly; the CJA, authorized agency or FBI keeps sufficient overall control and visibility of all security aspects, including vulnerability identification and incident reporting and response, and the provider's incident process conforms to this Policy.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.