A process shall be employed to protect private keys used for code signing and product identity from unauthorized access or modification, covering their generation, storage, use and revocation.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.