Cryptography used to protect the equipment's security assets or financial assets follows best practice, with a departure allowed only for one specific security mechanism where it is identified and argued for under the ACM, AUM, SCM, SUM or SSM clauses.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.