Select the appropriate assessor or team, develop a control assessment plan covering the controls and enhancements assessed, the assessment procedures and the environment, team and roles, have the plan approved by the authorizing official before the assessment, assess the controls and any affected by evolving threats at least every three years for correct implementation, intended operation and outcome, produce an assessment report, and provide it to the individual who executed the CJIS User Agreement or holds the contract with the FBI.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.