WVPI needs visible commitment from the top so that resources exist to build the program, to manage incidents and to pay for training, outside advice and security measures. An organization implementing these strategies should secure top management's involvement in: making the program a priority among senior leaders; reviewing and approving the WVPI policy; naming the people who will develop, implement and monitor the program; giving the resources and authority to set up, run, monitor and maintain it, including employee training and education; and giving the resources and authority needed during incident management.
This control maps to 2 controls across 2 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.
Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.
The graph holds this control, the 2 it maps to, and the evidence behind each claim, over MCP and REST.