Periodically assess risk to systems and the controlled unclassified information they process, store, and transmit, and update assessments after significant changes.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.