The organisation appoints a senior accountable official for risk management to align security and privacy management with strategic, operational and budget planning, and establishes a risk executive function that views risk organisation-wide and keeps its management consistent. No enhancements. Deployed organisation-wide in the medium profile.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.