Determines whether an incident response plan exists, is distributed to the personnel who need it, is reviewed and updated, and is protected from unauthorized disclosure.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.