The institution belongs to or subscribes to at least one threat and vulnerability information sharing source, such as FS-ISAC or US-CERT, that supplies threat information.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.