Business unit managers communicate business needs, reporting needs and product plans to IT, prioritise, fund and align IT development with the unit's strategy, test compliance with IT control policies in the unit, ensure backup IT resources, document information flows and notify the CISO when processes change, perform due diligence and ongoing monitoring of third-party providers, and engage the CISO on the inherent security risk of new initiatives, with responsibilities that differ between centralised and decentralised IT models but always include enforcing internal controls in their areas.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.