The application is accompanied, in triplicate, by a description of the vehicle type covering the items of Annex 1 (3.2.1: the cyber-security-relevant systems, their components and interactions with other systems and external interfaces, a schematic of the vehicle type, the CSMS certificate number, and documents describing the risk assessment outcome and identified risks, the mitigations implemented and how they address the risks, the protection of dedicated environments for aftermarket software, services, applications or data, the tests used and their outcome, and the consideration of the supply chain) and by the Certificate of Compliance for CSMS issued under paragraph 6 (3.2.3).
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.