Implement Section 6 PII breach response including: incident response for PII breaches + breach notification process per OMB Circular A-130 + OMB M-17-12 (federal civilian) + state breach notification laws + GDPR Article 33-34 + post-incident analysis and lessons learned. Notify US-CERT and CISA within 1 hour for federal civilian agencies. Notify affected individuals within 60 days for federal civilian (varies by state and statute). Coordinate with Privacy Officer + Office of General Counsel + Office of Public Affairs + Office of Inspector General.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.