Develop an incident response plan that gives a roadmap for the capability, describes its structure and how it fits the organisation, meets the organisation's mission, size, structure and functions, defines reportable incidents, provides metrics, defines the resources and management support needed, addresses information sharing, is reviewed and approved by executive leadership annually and explicitly assigns incident response responsibility to the incident reporting personnel and the CSO or CJIS WAN Official; distribute it to incident handling personnel, update it for system and organisational change and for problems met in use or testing, communicate changes, and protect it from unauthorised disclosure and modification.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.