For CONFIDENTIAL, SECRET and TOP SECRET systems, agencies must consult the GCSB about pre-installation testing, security verification and associated tests before equipment is put into use in an operational system.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.