Once threats are identified and vulnerabilities and consequences assessed, the planning team combines them scenario by scenario and compares the threat or hazard, vulnerability and consequence of each to rank which pose the highest risk, so that action development and implementation follow the prioritised risks.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.