SIG risk domain M, Endpoint Security. The third party secures laptops, desktops and mobile devices used to deliver the service through configuration standards, protection against malware, encryption, device management and control of what connects to the environment, as part of access control across endpoints.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.