Describe accountability and reporting lines: senior management review and oversight, the designated cybersecurity leader (for example a CISO) and their reporting to executive management and the board, roles of personnel performing cybersecurity controls, and how oversight of external parties such as vendors fits the structure.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.