Incidents are reported, at least in an ad hoc way, for example internally and to bodies such as national CERTs and relevant ISACs, with responders knowing what to report, when and under what constraints.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.