Processes that include criteria to evaluate and define attempts to compromise; determine whether an identified Cyber Security Incident is a Reportable Cyber Security Incident or an attempt to compromise an applicable system under those criteria; and provide notification under R4.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.