Secure software update procedures are employed (Table B2, 12.1: compromise of over-the-air update procedures, 12.2: compromise of local or physical update procedures, 12.3: software manipulated before an intact update process). UN Regulation No. 156 sets the approval requirements for the update process and its management system.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.