The organization should document reasonably foreseeable misuse of the AI system, which also helps judge what malicious actors could gain by deliberately misusing it, and should determine and document the foreseeable impacts on the interested parties identified under 6.7 of typical foreseeable misuse.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.