The process used to ensure software updates are protected to reasonably prevent manipulation before the update process is initiated. The Interpretation Document: processes controlling which updates are sent and that only known and valid updates reach vehicles, including updates received from suppliers; manipulation means changes to the update code not authorised by its originator; reasonable means the manufacturer can argue through claims, arguments and evidence that the process meets the threat; ISO/SAE 21434, ISO 24089 5.3.4.1, 6.3.4.6, 8.3.1.7 and the CSMS may evidence it.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.