The agency head ensures that the CIO, in coordination with other senior agency officials, reports annually to the head on the effectiveness of the agency's information security program, including the progress of remedial actions.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.