The component must be able to verify the intended operation of its security functions and report anomalies found, on demand and during scheduled maintenance. RE 1 requires the verification during normal operation (the counterpart of SR 3.3 RE 2); the IIC list notes that the automated mechanisms of SR 3.3 RE 1 have no 4-2 counterpart.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.