The owner or operator must set out the cybersecurity organisation, designate in writing a Cybersecurity Officer (CySO), with alternates as needed, reachable by the Coast Guard at all times and qualified in the listed areas, and ensure the CySO carries out the listed duties: assessments, measures, annual audits, incident response plan execution, exercises, inspections, corrective action, awareness and training, incident recording, records, reports, plan submissions, briefings and remediation of known exploited vulnerabilities.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.