A host device shall enforce usage restrictions on mobile code; RE 1 adds a check that mobile code is authentic. Mirrors EDR 2.4 for host platforms. The identifier is named in the IIC SMM mapping list. See the official text for the full requirement.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.