Through the delegated authority the CIO develops and maintains the agency-wide information security program required by subsection (b) and the information security policies, procedures and control techniques that address every applicable requirement, including those issued under section 3553 and 40 U.S.C. 11331.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.