Risk assessments are conducted periodically and cover the risks of operations, cybersecurity, concentration, systemic effects, dependence on cloud, the supply chain, outsourcing and exit, scaled to how critical the workload, service or infrastructure is.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.