The entity must appoint a control team lead responsible for day-to-day management of the TLPT and for the control team's decisions, and put in place measures so that knowledge of a planned or ongoing test is restricted to the control team, management body, testers, threat intelligence provider and TLPT authority; the control team consults the test managers before involving any blue team member; the control team learns of any detection of the test by staff or providers and contains any resulting escalation; secrecy arrangements bind staff, providers, testers and the threat intelligence provider; information is given to test managers on request; and the test is referred to by code name where possible.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.