Beyond the mandatory profile, optional measures may be supported and declared, such as additional cipher suites or stricter certificate handling, as the referencing standard or the organization's policy chooses.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.