Within one year DHS recommends to the FAR Council contract language requiring suppliers of software available for purchase by agencies to comply with, and attest to complying with, the requirements issued under 4(g) to 4(k), and the FAR Council amends the FAR as appropriate (4(o)).
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.