Where an imminent event can be detected through internal threat monitoring or received from external agencies, such as an escalating IT breach, a cyber alert from an attacked peer, a severe weather warning or a change in terrorist threat level, warning lets the organisation mobilise resources in advance and prepare the workforce. For internal alerts everyone understands that they must tell their line manager about a real or potential threat, and a reported threat is then assessed, escalated and handled collaboratively so the risk is judged and action decided, encouraged by an inclusive approach to risk awareness and internal briefings. When the warning comes from an external agency, a designated person should keep in touch with that agency so advice and information stay available while the event unfolds.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.