The preparation phase ends with a kickoff meeting that formally begins the agency authorization, introduces the team, reviews the offering and aligns the process and milestone timelines, so that all stakeholders share an understanding of the process, milestones, deliverables, roles and schedule; the offering's purpose, authorization boundary, data flows, known security gaps and remediation plans, agency-specific requirements, customer-responsible controls and areas that may need agency risk acceptance; the agency's package review and risk-based decision process; and best practices. Offerings not yet In Process may be listed after the kickoff if the agency is comfortable with the briefing and timelines.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.