The processes used to provide relevant data to support analysis of attempted or successful cyber-attacks, with the responsibilities for handling the data and the analysis. The Interpretation Document names a security incident response team procedure, field monitoring, and the procedures when an incident occurs or a vulnerability is discovered, including what information passes to the analyst at each step.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.