A CISO is appointed with the authority to give independent advice on information security and to report on it to the board and, where applicable, the supervisory authority.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.