Operators should develop, document and implement site-specific security measures for each critical facility, tailored to that facility and stating the actions to take in response to pertinent NTAS Bulletins or Alerts, and review and update them periodically at intervals not exceeding 18 months.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.