Changes to contract scope, data handled, or processing environments may alter the Risk Profile and require re-assessment, with timely communication to the MOD.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.