Management identifies and mitigates the risks of open-source software and hardware components, whose code quality and review are less transparent and whose updates may not reach the entity, by requesting updates from the original developer and deploying them or engaging in-house or third-party developers where the original developer no longer updates, and by applying OWASP's component analysis strategies: evaluating frameworks and libraries to limit architectural change and rewrites, analysing each component's purpose to find duplicates, limiting the number of components, using private or public repositories and the further practices the booklet lists.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.