The organization documents a process to make sure that products, processes and services it buys meet current statutory and regulatory requirements in the receiving country, the country they are shipped from and the destination country the customer names. Where the customer defines special controls for products subject to statutory and regulatory requirements, the organization puts them in place and keeps them, suppliers included.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.