Drawing on its Risk Assessment, the Licensee shapes its Information Security Program to reduce the risks identified, in proportion to how large and complex its activities are (its reliance on Third-Party Service Providers included) and to how sensitive the Nonpublic Information it uses or holds is.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.