Responsibility for drawing up the cybersecurity plan and keeping it current, and for tracking how the activities are progressing against it, shall be assigned as described in RQ-05-03 together with RQ-05-04.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.