Any covered entity subject to the reporting requirements must preserve data relevant to the covered cyber incident or ransom payment in accordance with the procedures established in the CISA final rule.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.