A role-appropriate training program whose content covers cyber security policies, physical access controls, electronic access controls, the visitor control program, handling and storage of BES Cyber System Information, identification of a Cyber Security Incident and initial notifications under the response plan, recovery plans, response to Cyber Security Incidents, and the cyber security risks of electronic interconnectivity and interoperability with other Cyber Assets, including Transient Cyber Assets and Removable Media.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.