Per OWASP SAMM v2 Operations business function: secure operations practices. Security Practices: (1) Incident Management including incident detection + response + forensic readiness + (2) Environment Management including configuration hardening + patch + update management + (3) Operational Management including data protection + system de-commissioning + legacy management. Requirements include (a) operate incident detection + response capability including alerting + triage + investigation + remediation + (b) maintain forensic readiness including log retention + evidence handling + (c) maintain configuration hardening baselines including drift detection + remediation + (d) operate patch + update management including testing + deployment + verification + (e) implement data protection across operational lifecycle including classification + handling + retention + secure deletion + (f) operate secure system decommissioning + legacy management.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.