Software is security assessed, authenticated and integrity protected, and security controls minimise the risk from third-party software intended or foreseeable to be hosted on the vehicle (Table B4, 17.1: corrupted or poorly secured applications used to attack vehicle systems).
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.