For each threat identified, the Licensee assesses how likely it is and how much harm it could do, bearing in mind how sensitive the Nonpublic Information at stake is.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.