An MCDA has its cloud services independently audited for assurance that they are provided and used consistently with the service agreements among the MCDA, its providers and its partners, and makes sure the governing agreements guarantee the availability and security of the data and evidence (records and logs of what happened and under what conditions in every party's operating environment) needed to audit how the services are used, hosted, kept available and made to perform and associated resources.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.