If software is legacy software that cannot comply with this standard, perform risk management, gap analysis, and implement a plan to mitigate risks introduced by gaps in documentation and process.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.