Threat scenarios for cyber security assessments should be challenging but plausible, and the FI may use threat intelligence relevant to its environment to identify the threat actors most likely to target it and the tactics, techniques and procedures they would use.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.