Each agency submits to the OMB Director, the Secretary of Homeland Security, the named House and Senate committees, its authorisation and appropriations committees and the Comptroller General a report on the adequacy and effectiveness of its information security policies, procedures and practices, including for each major incident or related set of incidents a description with summaries of the threats and threat actors, vulnerabilities and impacts, the risk assessments of the affected systems before the incident, their compliance status at the time, and the detection, response and remediation actions; the total number of incidents with descriptions of significant compromises, impact levels, types and locations; each major incident involving a breach of personally identifiable information with the number of individuals affected and the information exposed; and anything else the Director or the Secretary requires.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.