The owner must comply by the deadline with written directions on threat response, prescribed technical or other standards, codes and standards of performance, appointment of an approved auditor, or other matters needed for the system's cybersecurity.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.