The contract documents who manages the devices, such as firewalls and routers, that secure the connection with the third party, and the contract or service level agreement documents who must notify whom of direct and indirect security incidents and vulnerabilities.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.