A process shall be employed to ensure that secure design best practices (the supplier's own catalogue, informed by industry practice) are documented, applied and kept current.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.