Root-cause analysis of incidents examines causes, the response and the control weaknesses that allowed them, and corrective actions are taken, including updates to the response plan.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.