No later than 90 calendar days after a plan test or actual Reportable Cyber Security Incident response, document any lessons learned or their absence, update the plan based on them, and notify each person or group with a defined role of the updates.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.