A component provider offering decryption-management services manages and monitors changes to its services and tells the solution provider when HSM types are added or withdrawn, when critical infrastructure changes (the PCI DSS environment included), and when its PCI DSS compliance status changes, following the Council's delta-change process where applicable.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.