Security controls are applied to minimise the risks associated with cloud computing, with OWASP and the NCSC cloud computing guidance named as sources (Table C1, threat 3.2: loss of sensitive data held by third-party cloud service providers through attacks or accidents).
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.