The company has personnel security practices suited to its identified risks, processes for staff to report security risks and incidents, robust security incident response processes, and measures ensuring staff hold the appropriate security clearance.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.