Advanced control principles for communication and improvement (required, with baseline and intermediate, of an AI whose inherent risk is high). Quantitative and qualitative metrics measure the incident response process; detailed metrics, dashboards or scorecards on incidents and events go to management and into the board pack; in 2.0 a continuous, iterative, institution-wide improvement process feeds lessons learned into the response plan, training and testing, trend analysis identifies common factors, control effectiveness and incident costs, and simulation exercises test readiness for widely reported events including data corruption and destruction.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.