An embedded device shall enforce usage restrictions on mobile code it can execute (prevent, authenticate and authorize, restrict transfer, monitor use); RE 1 mobile code integrity check. The 3-3 SR 2.4 counterpart applies at the system level. The identifier is named in the IIC SMM mapping list. See the official text for the full requirement.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.