Any person required by an incident response officer investigating a cybersecurity threat or incident must attend and answer questions, give a signed statement, produce records or documents and provide information; for incidents meeting the severity threshold the officer may also direct remedial measures or cessation of activities, entry and access to computers, and other steps; contractual obligations are no excuse, and wilful misstatement or refusal is an offence.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.