Where the law or the relevant regulatory authority requires it, the certification body provides the regulatory authority with information about certifications it has granted, suspended or withdrawn.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.