The engineering, CIO and SMA authorities review and agree with any tailoring of NPR 7150.2 requirements according to the authority column of the requirements mapping matrix, so no requirement is relaxed without the authority that owns it.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.