Per PSPF Incidents: handle security incidents. Requirements include (a) operate incident response capability including detection + triage + containment + recovery + lessons learned + (b) notify ASD ACSC + AFP per requirements + (c) maintain incident log + reporting + (d) implement business continuity + disaster recovery + (e) maintain documented IR + (f) align with broader Commonwealth incident reporting.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.