Describe how the board oversees the program: the cybersecurity and IT knowledge it has or can draw on from outside, any committee designated for oversight, and how often and in what detail it reviews cybersecurity matters, including oversight of security incidents.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.