The AEO plans monitoring, measurement, analysis and improvement to check consistency with the guidelines and the adequacy of its security management system: it regularly assesses security risks in its operations and mitigates them, performs and documents regular self-assessments with named responsible parties, and feeds results, feedback and recommendations into a plan for the next period.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.