One or more processes to preserve data, per Cyber Asset capability, for determining the cause of a Cyber Security Incident that triggers activation of the recovery plan, without impeding or restricting recovery.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.