Management maintains an incident response program with defined protocols to declare and respond to incidents that contains the incident, coordinates with law enforcement and third parties, restores systems, preserves data and evidence, assists customers and supports resilience, built on relationships formed beforehand with law enforcement, consultants, counsel and information-sharing bodies, a comprehensive plan integrated with policies, procedures and training, periodic testing by scenario planning and tabletop exercises with internal and external parties, assigned responsibilities, formal information flows, understood tools, thresholds for reporting significant incidents and processes for notifying regulators, customers and others.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.