The risk management program identifies, measures, mitigates, monitors and reports cyber risk, and management reviews audit results and uses them to improve cybersecurity policies, procedures and controls.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.