Senior agency officials determine the levels of information security appropriate to protect their information and systems in accordance with the NIST standards for security categorisation and related requirements promulgated under 40 U.S.C. 11331.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.