The organization shall set out, in a Statement of Application, the part of the international supply chain for which it claims compliance with this standard. As a minimum the statement shall give: details of the organization; the scope of service; the names and contact details of every business partner inside that scope; when the security assessment was finished and how long it remains valid; and the signature of a person with authority to sign for the organization. The statement may be widened to cover other parts of the chain, such as the final destination.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.