Baseline: policies and procedures for cybersecurity incident handling, analysis and reporting that assign specific roles and tasks to individuals and teams, and an established and maintained cyber incident response capability. Enhanced: periodic cybersecurity incident response exercises and a process supporting 24-hour cyber incident response.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.