The plan must name the roles of IAC cybersecurity stakeholders, internal and external partners among them, coordinate cybersecurity between them and with existing company functions and IAC operations, document where responsibility and accountability for IAC cybersecurity pass from one party to another within the organisation or across organisational lines, require any reassignment to be formally agreed and documented by all stakeholders, and require management-of-change processes to consult and inform all stakeholders on modifications that affect a transition point (for example firewall rule changes communicated to the owners of the affected conduits and zones).
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.