Cyber response practices: response processes and procedures are run and maintained so that detected cybersecurity incidents are dealt with promptly; response is coordinated with internal and external stakeholders as appropriate, including regulators and law enforcement; analysis supports an effective response and the recovery that follows; the firm acts to stop a disruption spreading, to soften its effects and to resolve the incident; and response improves by taking in the lessons of current and past detection and response work.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.