Requirement 0027 (Part One: Governance, section 3.6.1 Security Planning, Incidents and Training; applies to All entities; dated 31 October 2024; retained from Release 2025): Security incident management and response plans are incorporated into the entity's business continuity arrangements. Incident management and response plans are incorporated into business continuity so business-critical people, operations, systems and services are supported during incidents or disasters.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.