Within 60 days, the head of each agency develops a plan to implement Zero Trust Architecture that incorporates, as appropriate, the migration steps NIST has set out in standards and guidance, describes steps already completed, identifies the activities with the most immediate security impact and includes a schedule to implement them; OMB's Federal Zero Trust Strategy (M-22-09) later set goals to be met by the end of FY 2024.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.