No baseline requirement; at the Enhanced Profile and above the plan must require that the essential functions required to deliver critical services are catalogued and included in risk management decisions.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.