A covered entity classified as a Group I licensee (Regulation 6.010(8)) designates a qualified individual responsible for developing, implementing, overseeing and enforcing the cybersecurity best practices and procedures developed under subsection 3.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.