For the vehicle type being approved the manufacturer identifies and manages supplier-related risks. The Interpretation Document links this to 7.2.2.5: the information from the supply chain, with the manufacturer's own, must be sufficient to assess 7.3.3 to 7.3.6, and cascading legally binding requirements beyond Tier 2 is accepted as difficult; evidence can be contract sections dealing with the Regulation's requirements.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.