Cyber security best practices for software and hardware development are followed (Table B6: 26.1 to 26.3 weak, insufficient or deprecated cryptography, 27.1 parts engineered to enable attacks or failing design criteria, 28.1 software bugs, 28.2 development remainders such as debug and JTAG ports, development certificates and passwords, 29.1 superfluous open ports); for the 28.1 to 29.1 rows the table adds cybersecurity testing with adequate coverage, and for 29.2 circumventing network separation it includes best practices for system design and system integration.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.