The bank has a Board-approved Cybersecurity Policy setting a strategy to combat cyber threats suited to its business complexity and risk appetite, kept distinct and separate from the broader IT and information security policies so that cyber risks and their mitigation stand out.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.