The processes used to keep the risk assessment current: identifying when risks to a vehicle type change and how the change is reflected, using sources such as threat sharing platforms, lessons learned and conferences. The Interpretation Document: unfulfilled where nothing requires the assessment to be updated; fulfilled where assessments are redone on significant events (system replacement, change in the threat) and are dynamic in the light of technical change, change of use and new threat information.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.