Procurement processes that address, as applicable, notification by the vendor of vendor-identified incidents related to the products or services that pose cyber security risk to the entity.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.