The organisation develops an organisation-wide continuous monitoring strategy and programs with defined metrics, monitoring and assessment frequencies, ongoing monitoring, correlation and analysis, response actions, and reporting of system security and privacy status to defined roles at a set frequency. No enhancements. Deployed organisation-wide in the medium profile.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.