A documented supply chain cyber security risk management plan for high and medium impact BES Cyber Systems and their EACMS and PACS with processes used in planning procurement to identify and assess cyber security risks to the BES from vendor products or services arising from procuring and installing vendor equipment and software and from transitions between vendors.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.