Incident responses draw on and can trigger the predefined states of operation defined under SITUATION-3g, so responses are measured and suited to the threat.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.