A process shall be employed for developing and maintaining the product that documents each of the practices of this standard and their application across the product lifecycle, so that security is built into the same process that produces the product rather than added by a separate team.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.