Management evaluates RFI, RFP and RFQ responses through a formal, fair and consistent process with predetermined criteria that compares each proposal to the defined requirements and then compares the qualifying proposals, using general criteria such as audit rights and independent audit reports, confidentiality and privacy standards, copyright, delivery, liability limits, licensing, maintenance, financial condition, security requirements, backup and resilience, cost, operations and controls, end of life, legal requirements, subcontractors, testing, references, training, warranty, incident response roles and insurance, plus the software, hardware and service criteria the booklet tables.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.