Management maintains an accurate inventory of free and open-source software within asset management, understands and abides by the provisions of public domain and open-source licences including who owns the source code, restrictions on use, obligations to contribute enhancements and prohibitions on commercial use, recognises that FOSS is acquired as is with possibly unknown developers, unpatched vulnerabilities and changes by unknown parties, and knows what information is shared when contributing to the FOSS community.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.