The plan must require that the risk assessment process determines and prioritises risk response options, and that the managers answerable for the segregated environment's safety, integrity and reliability review and approves the risk assessment results before any risk response action affecting the security zone is taken.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.