This process group covers how the organisation responds once a problem has been found: writing a remediation plan, bringing in specialists, and securing the people and budget needed to carry it out. It takes in examining the legal exposure and establishing what caused the damage. It finishes with revising an existing policy or drafting a new one so that the issue is less likely to recur.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.