The listed capabilities form the basis of the information exchange between manufacturer, integrator and HDO, and the resulting agreements set out the features, roles and responsibilities each party holds for security risk. The MDS2 form (illustrated in Annex A) is the tool through which the user is told, in writing, what the software's security properties and capabilities are.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.