Each agency develops, documents and implements an agency-wide information security program that provides information security for the information and systems supporting its operations and assets, including those provided or managed by another agency, a contractor or another source, and that contains the eight elements of paragraphs (1) to (8).
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.