The project manager assesses the cybersecurity of the software components according to Agency security policy and the project requirements, including the risks introduced by COTS, GOTS, MOTS, open source and reused components.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.