Formal agreements with every third party performing P2PE functions for the solution provider set out each party's functions, its commitment to maintain the P2PE controls it is responsible for, notification and documentation of changes, notification of security incidents, service levels, continued compliance with the applicable P2PE and PCI DSS requirements, proof of compliance and the reports the solution provider needs, including where the third party manages any of the SCD types in the solution.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.