Incident response plan testing and updates. Level 1 (a to c): a test plan defining test types, scope and participants; testing at least annually; and training for personnel with incident responsibilities. Level 2 adds identifying the industry standards applicable to incident response and keeping the plan current against them; Level 3 requires incident drills, with defined escalation response times, deep stakeholder involvement and reporting, at least twice a year.
This control maps to 1 controls across 1 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.
Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.
The graph holds this control, the 1 it maps to, and the evidence behind each claim, over MCP and REST.