A standardised assessment tool aligned with industry standards and best practice may help the firm gauge its cybersecurity preparedness; Appendix A names the FFIEC Cybersecurity Assessment Tool, the NIST Cybersecurity Framework, the CIS Critical Security Controls and the FSSCC Cybersecurity Profile as examples, and the agencies endorse none of them.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.