Generate alerts for security events the entity determines need an alert, including at minimum detected malicious code from Part 4.1 and detected failure of Part 4.1 event logging, per capability.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.