In the assessment the manufacturer declares, using the Appendix 1 model, and demonstrates to the satisfaction of the approval authority or its technical service that it has the processes needed to comply with all the cyber security requirements of the Regulation. The Interpretation Document allows demonstration by documentation, presentation and/or audit, in a format agreed beforehand; an authority may arrange with another Contracting Party's authority to accept that party's CSMS certificate but remains responsible for the whole scope of the CSMS.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.