The assessment covers the systems and infrastructure that support the institution's Hong Kong business and operations; under 2.0 an institution may leverage the results of similar cyber resilience assessments performed by its banking group or head office, which the CFI 2.0 Annex introduced to simplify the process.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.