Cybersecurity incidents are reported to the NCA. The guide names the Haseen portal or NCA's official incident email as reporting channels and expects documented procedures and samples of past notifications.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.