For CONFIDENTIAL, SECRET and TOP SECRET systems, agencies must carry out a risk assessment specific to virtualisation that identifies the risks, the risk treatments that relate to them and the controls.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.