A PP or ST built on the standard defines its TSF and TOE along the lines of 6.4: the TSF comprises the QKD function (FUN_QKD, raw data generation and post-processing), system control and management (FUN_SCM) and self-protection (FUN_SP); the TOE is the QKD module or modules with their external interfaces, while the quantum and classical channels joining them lie outside it, and for MDI-QKD and entanglement-based protocols the middle party's module is excluded as 5.4 explains.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.