Carried first-edition guidance. Commercially licensed software installed in a cloud service can breach its licence, so the CSC should identify the cloud-specific licence conditions before allowing licensed software into the service, watching in particular for elastic, scalable services that run it on more systems or cores than licensed. The CSP should have a process for dealing with intellectual property complaints.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.