The entity has defined which officials maintain formal information security contacts with which government and other agencies and regulators, and updates the overview at least annually.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.