The cloud and hosting requirements are implemented. Implementation includes the minimum items in 4-2-3 and must achieve the subdomain objective, so that cloud and hosting risks are remediated and the entity's assets hosted, processed or managed by third parties are protected.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.