In evaluating controls the bank factors in Board oversight, policies, processes, cyber risk architecture, experienced and qualified resources, training and culture, threat intelligence gathering and analysis against the banking sector, information sharing with peer banks, IDRBT, RBI and CERT-In, preventive, detective and corrective controls, vendor management and incident management and response.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.