The organisation includes the resources to implement its information security and privacy programs in capital planning and investment requests, documents exceptions, prepares the required documentation in line with applicable law and policy, and makes the planned resources available for expenditure. No enhancements. Deployed organisation-wide in the medium profile.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.