The company identifies the assets and supporting infrastructure needed to carry out its functions during an emergency or security event, assesses security risks to them and to the supporting activities and processes, including the impact of a security event, puts reasonable measures in place to avoid or mitigate those risks, and uses appropriate up-to-date technology and systems to keep them secure.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.