Enterprises trading cybersecurity products and services (civil cryptography, testing, monitoring, intrusion prevention, consultancy, incident response, data recovery and others) must hold a licence, ensure products conform to declared standards and technical regulations before sale, keep customer information and technical records, refuse service to users who breach the law or their commitments, and cooperate with the specialised force; licences under the 2015 Law remain valid to expiry, and products in use before 1 July 2026 must meet the new conditions by 1 July 2027.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.