A defined method, for example comparison with actual events or risk quantification, is used to estimate the impact of higher priority cyber risks, covering factors such as safety, disruption and costs.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.