Establish a security program, tied to the formal Emergency Response Plan, that responds to security incidents, monitors for, discovers and handles security alerts and technical vulnerabilities, collects and analyses security data, limits the organisation's risk profile and keeps management aware of changing and emerging risks.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.