Clear and timely incident communication is part of continuous monitoring: providers report any suspected or confirmed incident that compromises, or threatens to compromise, the service or the data and metadata it holds, following the FedRAMP incident communications procedures (including responses to emergency directives), and the agency uses those reports to protect its data, keep operating and reach full resolution.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.