Per SOCI Sections 30BC + 30BD: cyber incident reporting. Requirements include (a) Critical Cyber Security Incident reporting within 12 hours of becoming aware to ASD ACSC + (b) Other Cyber Security Incident reporting within 72 hours + (c) maintain incident response capability + (d) cooperate with ASD on response + (e) maintain breach log + tabletops.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.