Per Papua New Guinea National Cybersecurity Policy and Cybercrime Act: incident response + investigation cooperation. Requirements include (a) operate Incident Response and Notification capability including detection + triage + containment + recovery + lessons learned + (b) maintain notification to NICTA + CERT + law enforcement per applicable obligations + (c) cooperate with Investigation Powers including evidence preservation + production orders + interception warrants per the Act + (d) maintain Data Retention for Service Providers including subscriber + traffic + content data per applicable obligations and timeframes + (e) maintain chain of custody for evidence + supporting prosecution + (f) integrate organisational logging + monitoring + retention with investigation cooperation obligations.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.