Agencies should get regular assurance checks on their cloud service providers and make sure a suitably qualified assessor carried out each check.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.