In the initiation phase the project team describes the purpose, expected benefits and support for entity objectives, summarises the confidentiality, integrity, availability, resilience and legal and regulatory requirements, identifies alternatives and justifies the recommended solution, management accepts, rejects or amends the request before allocating resources and may commission a feasibility study or, for modifications, a security impact analysis on existing controls, and planning coordinates stakeholders to document functional, security and network requirements, the responsibilities of third parties, audit, security and IT, the SDLC processes, phase acceptance criteria and the further items the booklet lists.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.