L5 applies to contracts handling the most sensitive MOD information, requiring controls aligned with Cabinet Office Security Policy Framework and JSP 440, with active MOD oversight.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.