Baseline: report significant cyber incidents to senior management, to the appropriate federal, state, local, tribal and territorial entities and to the applicable ISACs. Enhanced: follow the Appendix B notification criteria.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.