The security policy, approved under Article 12, sets out clearly the organisation's mission, its legal and regulatory framework, security roles with duties and how they are appointed and renewed, the security committee structure and membership, and guidelines for structuring, managing and accessing security documentation.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.