Retain records related to Reportable Cyber Security Incidents and to incidents that attempted to compromise an applicable system, as set out in the response plans.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.