A formal change management function governs change requests that are decentralised or highly distributed, and identifies and measures the security risk that might raise exposure to attack.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.