The team may consider further actions, including: reporting criminal activity to law enforcement, consulting or engaging police resources on the incident and cooperating with any criminal investigation; security measures for the workplace generally or for specific targets, including changes to access to workspaces, networks and equipment; strategies and messages to address fear and disruption among employees and teams; where the person of concern stays on, coaching relevant managers and supervisors to enforce behavior standards, watch the person's conduct closely and report any new concern to the team at once; and updating the program's policies and procedures where required.
This control maps to 1 controls across 1 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.
Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.
The graph holds this control, the 1 it maps to, and the evidence behind each claim, over MCP and REST.