In addition to its reports, each agency, in consultation with the OMB Director, includes in its performance plan under 31 U.S.C. 1115 a description of the time periods and the resources, including budget, staffing and training, needed to implement the information security program, based on the program's risk assessments.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.