An integral process handles incidents including reporting of events and weaknesses with classification and escalation criteria, with personal data breaches handled under the GDPR and LOPDGDD; R1 uses a single-window notification to CCN-CERT; R2 covers urgent containment, evidence collection, investigation, informing owners and preventing recurrence; R3 adds dynamic reconfiguration to stop or limit attacks.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.