The asset owner shall have an IACS incident response plan covering detection, containment, eradication, recovery and lessons learned, with roles and the interface to safety and operations.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.