The owner must comply, by the deadline specified, with written directions of a general or specific nature about action on a cybersecurity threat, compliance with prescribed technical or other standards or with codes and standards of performance, appointment of an approved auditor, or other matters necessary for the CII's cybersecurity; the Commissioner normally gives notice and considers representations first.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.