Management maintains documentation for internally developed and externally procured systems that conveys how a system was developed, how it functions and where its security and resilience points lie, including feature and function descriptions, design specifications, programming descriptions, build procedures and operating instructions, updates it as systems change, restricts access to sensitive documentation by job need, obtains documentation from third parties and confirms before purchase that it meets the entity's standards, and keeps current build and configuration instructions so administrators can recover the system after a disruption.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.