Management runs quality management, independent of development with compensating controls where segregation is incomplete so that developers do not test their own work, through quality assurance that gives confidence a system conforms to requirements and quality control techniques such as design analysis and defect inspection, applied to internally and externally developed programs and addressing commitment from senior management and the further elements the booklet lists, so that projects deliver expected functionality, security and interoperability securely and resiliently.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.