After information has been furnished, the owner must notify the Commissioner within 30 days of any material change made by or for it to the CII's design, configuration, security or operation, a material change being one that affects or may affect the CII's cybersecurity or the owner's ability to respond to threats or incidents.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.