No baseline requirement; at the Enhanced Profile and above the plan must require that the organisation's critical infrastructure role, and risk particular to its sector, are recorded in the risk management strategy and that this role is incorporated into the risk tolerance posture, risk responses and risk management decisions.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.