Set up a framework of security policies, controls and procedures for information, approved by management at the start and at intervals afterwards, that provides governance and periodic review and ensures security activities are communicated and coordinated.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.