The ONF is implemented so that responsibility for application security is assigned and a process exists that can evolve and raise visibility; so that every component, role and process involved is approved by the right decision makers and accepted by the actors concerned; so that resistance to the change is minimised; so that application security elements are standardised for uniform implementation and verification; so that maturity improves by keeping the elements current with the organisation's environment; and so that an appropriate level of security is reached cost-effectively, for example by reusing approved elements.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.