Where the failure of one particular component could create an unacceptable risk, that component must have high-integrity characteristics, and such components are chosen and assessed against how they will be used, and misused in reasonably foreseeable ways, over the expected service life; compliance is checked by inspecting the risk management file and the criteria used to choose them.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.