Using its performance objectives, the entity is required to evaluate its policies, program, procedures and capabilities, and to keep the program maintained and improved as a result.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.