Discloses how the manufacturer plans to keep third-party applications and software parts, custom parts included, security-supported across the device life cycle, such as managing third-party end of life (component details sit in the SBOM section): whether product development followed a secure development process (ISO/IEC 27034 and IEC 62304 are the examples given), with the standard and a short description (RDMP-1); whether the manufacturer assesses the secure-development practice behind each third-party application and component it builds into the device (RDMP-2); whether it publishes, on a web page or elsewhere, when software is supported until and what updates exist (RDMP-3); and whether it has a plan for managing end of life of third-party components (RDMP-4). The form's cross-reference column maps this section to IEC TR 80001-2-2 5.14 (RDMP), while the standard's section 3.1 table lists RDMP among the MDS2 additions.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.