The plan must require that the incident response plan includes incident mitigation processes and escalation processes that promptly engage the management level able to authorise mitigation, and that mitigation actions feed lessons learned.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.