Establish and document configuration settings for system components in the most restrictive mode consistent with operations, using established benchmarks such as DISA STIGs, CIS Benchmarks or FIPS; implement them; identify, document and approve any operational deviations for components that handle CJI; and monitor and control changes to the settings under agency policy and procedures.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.