A process shall be employed to verify that the secure development process itself is being followed, through audits or reviews of the practices as applied to each product.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.