The State ensures that each entity implementing NCASP elements periodically verifies that security measures outsourced to external service providers comply with the entity's security programme.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.