CBSs type approved for these capabilities may be exempt from survey, but the supplier submits signed test reports showing that the design, build, testing, configuration and hardening that a survey would otherwise verify.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.