Receive security alerts, advisories and directives on an ongoing basis from external sources such as CISA, MS-ISAC, US-CERT, vendors and federal and state advisories, generate internal ones as needed, disseminate them to the personnel who implement, operate, maintain and use the system, and implement directives within the established time frames or notify the issuer of the degree of non-compliance.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.