Assign a senior official as the responsible official for the system and the CSO, SIB Chief or IA Official as the authorizing official for common controls, ensure the authorizing official accepts the inherited common controls and authorizes the system to operate before operations begin, ensure the common-control authorizing official authorizes their inheritance, and update the authorizations at least every three years.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.