Determines whether risk to operations, assets and individuals arising from the processing, storage or transmission of CUI is assessed and updated at the defined frequency and on significant change.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.