Article 19.15: the Parties endeavour to build national cybersecurity incident response capabilities and collaboration to identify and mitigate intrusions and malicious code and to share information and best practices, and, recognising that risk-based approaches may beat prescriptive regulation, each Party endeavours to use and encourage enterprises to use risk-based approaches relying on consensus standards to identify, protect, detect, respond and recover (the functions of the NIST Cybersecurity Framework). For organisations: an encouragement, not a duty, to run risk-based cybersecurity programs on consensus standards.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.