Where the vehicle type provides dedicated environments for storing and executing aftermarket software, services, applications or data, the manufacturer puts in place appropriate and proportionate measures to secure them. The Interpretation Document: the manufacturer must justify how the risks of each dedicated environment are managed; environments may be on the vehicle, and risks from off-vehicle servers and services the vehicle interacts with must be considered; evidence is a description of the environment and of how its security measures work.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.