A process shall be employed to ensure that security updates for dependent components and operating systems the product uses are assessed for compatibility with the product and that users are told whether to apply them, within a stated time.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.