The analysis planned under 7.5 is carried out on the data gathered before incidents, with technology such as intrusion detection or anti-malware tools, so that incidents are recognised early; incidents found this way are handed on as input to detection, and the analysis results are kept for a later investigation. The clause text is not held.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.