The CCMP addresses detection, containment, response and recovery; the bank takes measures to prevent attacks and detect intrusions promptly, prepares for zero-day, remote access and targeted attacks, and addresses threats including denial of service and DDoS, ransomware, destructive malware, business email fraud, spam, phishing, spear phishing, whaling, vishing, drive-by downloads, browser gateway fraud, ghost administrator exploits, identity fraud, memory update fraud and password-related fraud.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.