Develop, document and disseminate to personnel with contingency planning responsibilities an agency-level contingency planning policy and its implementing procedures; designate personnel with information security responsibilities to manage them; and review and update both annually and after incidents involving unauthorised access to CJI or the systems that handle it, and after training simulations or exercises.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.