The FI should have a process to collect, process and analyse cyber events, threat intelligence and vulnerability information for relevance and impact; procure cyber intelligence monitoring services and actively take part in trusted threat information-sharing arrangements; and have a process to detect and respond to online misinformation about the FI, considering external media monitoring services.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.