Participants follow the Standard's security and counter-fraud good practice: assess and document resilience requirements, keep fit-for-purpose security controls, use threat intelligence (including the intelligence shared through Open Banking's cyber and fraud function and open-source sources) and build a shared understanding of security and fraud risks across participants; this is recommended practice, not a mandate.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.