Effective management structures provide shared communication between HR and security teams and set the policies and procedures by which cyber security incidents are detected, reported, responded to and handled, with disciplinary measures that staff know and understand (SyAPs paragraph 197).
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.