Identical to IS.I.OR.215: an internal scheme to collect and evaluate events including those reportable under 230, able with the 220 process to identify incidents and vulnerabilities with a potential safety impact, their causes and contributing factors fed into risk management, to evaluate all known relevant information and to distribute it internally; contracted organisations required by contract to report events; cooperation in investigations with organisations contributing significantly to the organisation's security; integration with existing schemes allowed.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.