When a component is developed out of context, its cybersecurity requirements shall rest on the assumptions made under RQ-06-18.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.