Awareness and training are delivered for the critical service, their effectiveness is evaluated and they are revised as needed; privileged users, senior executives, and the physical and information security staff each receive training in their own role supporting the service.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.