Acquisition personnel, assisted by project management, IT, contracting, finance, information security, legal and third-party risk management, specify requirements, request proposals, receive and evaluate bids and bidders, initiate contracts, manage relationships through their life cycle and evaluate supply chain risks including geopolitical risk, under segregation of duties, dual control and compensating controls that avoid conflicts of interest in choosing third parties, in roles such as procurement or third-party risk manager, contract manager and the others the booklet lists.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.