Where PKI is used, the control system shall be able either to run a PKI in line with commonly accepted best practice or to obtain its public key certificates from a PKI that already exists. It applies from SL 2.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.