A licensee implements ongoing controls and monitoring of its providers on a risk basis that reflects the materiality of the cloud services and IT assets, and organises the scope and frequency of that monitoring consistently.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.