Intermediate control principles for threat intelligence (required, with baseline, of an AI whose inherent risk is medium). A formal cyber threat intelligence programme includes feeds from external providers and internal sources (in 2.0 with regular evaluation of external monitoring services); protocols collect information from industry peers and government; a read-only central repository of threat intelligence is kept to protect its integrity.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.