The board has determined and defined who holds which role and responsibility in the entity for information security, for privacy protection, for operational technology and for business continuity management, and how information security, OT protection, continuity of task performance and BCM; adequate incident treatment receives specific attention when roles are assigned. Line managers and process owners responsible for assets are also responsible for addressing the risks that apply to those assets.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.