In assessing risk, identify critical operations and consider the interdependence of the people, facilities, systems and third parties they need; and identify vulnerabilities and potential impacts on critical systems and operations through scenario analysis, tabletop exercises or stress tests using a range of severe but plausible scenarios.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.