A manufacturer of a relevant connectable product that it intends, knows or ought to know will be a UK consumer connectable product complies with the security requirements; where there are several manufacturers each meets them or the deemed-compliance conditions.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.