Describe how competence is secured and people held accountable: background checks, education and certification assessment, ongoing training, use of contractors and offshore recruiting; awareness and training suited to responsibilities and access; resources for staff to do their cybersecurity duties; determining the types and levels of professionals needed; communicating expectations and holding people accountable; monitoring compliance with responsibilities and policies; and aligning rewards and measures with objectives.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.