If too little is known within 24 hours, the provider must still give its details, a description of the incident, the impact or harm, immediate actions and the notifier's details within the 24 hours, and give the remaining required information in writing within 5 business days after becoming aware of the incident.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.