Appoint an experienced CISO of good standing, separate from the compliance officer (the CISO may also be DPO); senior management reviews the effectiveness of technology compliance and allocates duties to avoid conflicts; staff are kept aware of current cyber risks including those specific to virtual assets; and material cybersecurity events or events triggering the continuity plan with material impact must be reported to VARA as soon as practicable and within 72 hours of detection, with nature, scope, impact, mitigation and any other authority notifications.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.