For requests for proposal involving information or information systems, information security requirements covering availability, integrity and confidentiality form part of the full package of purchasing requirements and are based on an explicit risk assessment.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.