In distributed development, the customer and the supplier shall each set a cybersecurity plan covering their own activities and interfaces, as clause 7 describes.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.