Functions, functional attributes or implementations required by certification regulations, or needed to show compliance with them, are captured as certification requirements and defined and agreed with the appropriate Certification Authorities.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.