The organisation makes sure the legal, regulatory, contractual and licensing requirements, and the other requirements and commitments, relevant to its business and its security operations are identified, considered and built into the SOMS, including the laws of the countries where it operates and from which it operates and international humanitarian and human rights law where applicable; it documents this information, keeps it current, and communicates the relevant parts to people working on its behalf and to relevant third parties, subcontractors included.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.