The incident response plan must define consistent criteria for the alert thresholds of an IAC cyber incident and include incident handling processes for setting the thresholds at which an incident may be present.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.