Acquire, develop and manage the system under an agency-documented system development life cycle that incorporates security and privacy, define and document security and privacy roles and responsibilities across the life cycle, identify the individuals holding them, and integrate the organisation's security and privacy risk management into life cycle activities.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.