Providers that carry government or regulated sector workloads run an information security management system, set up, operated, maintained and continually improved in line with ISO/IEC 27001 or another standard NITDA recognises, and also align with NITDA's own ISMS guideline for federal public institutions and whatever succeeds it.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.