The entity identifies, documents and approves a cybersecurity strategy, which is supported by the head of the entity or his or her delegate (the Authorized Official); the strategy's goals must align with the relevant legislative and regulatory requirements.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.