A component provider of decryption-management services tracks the status of its services and reports to each solution provider annually and on significant change: HSM types and models, HSM counts and changes, the date of the last physical inspection, the date and status of the last PCI DSS assessment and any suspicious activity.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.