Where the assessment finds the concern unfounded, the team may pass an employee case to HR or other management for normal handling consistent with the policy. Where the concern is real but not urgent, the team may take early steps such as: continuing or widening information gathering; consulting external threat assessment professionals for a fuller view of the risk and how to reduce it, which is particularly advisable early on when the team doubts its own ability to judge the risk even broadly; taking advice from others, for example close protection specialists and lawyers; judging whether more security is needed; starting coordination with local police where necessary; and monitoring over time as appropriate. Where the concern is imminent, law enforcement and security should be contacted at once.
This control maps to 1 controls across 1 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.
Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.
The graph holds this control, the 1 it maps to, and the evidence behind each claim, over MCP and REST.