The FI should run regular scenario-based cyber exercises (social engineering, table-top or cyber range exercises) to validate response, recovery and communication plans, involving, according to the objectives, senior management, business functions, corporate communications, the crisis management team, service providers and technical detection and response staff.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.