Agencies and evaluators take appropriate steps, commensurate with the risk and compliant with applicable law, to protect information that could adversely affect information security if disclosed.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.