Suppliers follow the E27 certification process; the integrator submits the zones and conduits diagram, the cyber security design description, the vessel asset inventory, any exclusion risk assessment (section 6) and a description of compensating countermeasures for any CBS approved with them in place of an E27 requirement, and manages design changes under UR E22 management of change.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.