When agencies use an unevaluated product that supports both approved and non-approved Cryptographic Algorithms, they must make sure only the Approved Cryptographic Algorithms are able to be used.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.