Evaluate and improve monitoring and detection procedures at least once a year for threat changes, technology advances and lessons learned; and build a mechanism to measure and evaluate KPIs and KRIs, report them to management, and set concrete targets and indicators to identify progress and issues.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.