DEFCON 658 requires suppliers to flow Def Stan 05-138 obligations through the supply chain to any subcontractor that will handle MOD Identifiable Information.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.