The risk management function monitors and challenges, independently of the business and IT functions, whether the cybersecurity framework works effectively, and reports on its implementation to the chief risk officer and the board.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.