The control system shall continuously monitor how every security mechanism performs, using commonly accepted industry practices, so that security breaches are detected, characterized and reported promptly. The ISAGCA paper describes it as an SL 2 addition that turns logging into detection.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.