Determines whether the exchange of CUI with other systems is approved and governed by documented terms, and whether the interfaces and controls are recorded and reviewed.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.