The plan must require continuous improvement processes in the incident response plan that capture the response lessons learned both during and after every execution, whether for an actual incident or a test, review them afterwards, review the lessons learned process itself, and generate and track action items to completion.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.