Per TSSR: Security Capability Plan + risk management + Supply Chain Risk Management for Vendors + Access Control to Sensitive Network Functions.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.