After an incident the provider, taking account of the views of those affected, assesses whether it could have been prevented, what remedial action is needed to stop or lessen similar incidents, how well it was managed and resolved, what would improve future management, and whether others should be told; notifies the persons and bodies it decides on; and carries out the remedial actions and the reasonable improvement actions identified.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.