The BIA is required to evaluate dependencies, suppliers that are single-source or sole-source, single points of failure, and what a disruption of the enabling resources could cost the entity in qualitative and quantitative terms.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.