The Licensee names the party in charge of its Information Security Program, which may be an affiliate, one or more of its own staff, or an outside vendor that acts for it.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.