Each year each agency has performed an independent evaluation of its information security program and practices to determine their effectiveness, including testing of the effectiveness of policies, procedures and practices on a representative subset of the agency's systems, an assessment of the effectiveness of the agency's policies, procedures and practices, and separate presentations as appropriate for national security systems.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.