Under control IR-1 the CSP's incident response plan, or a DoD addendum to it, specifically addresses cyber incidents and data breaches involving DoD data (a breach being any loss of control, compromise or unauthorised access, disclosure or use), covers all incidents regardless of time, day or location, commits to notifying the government whenever its data is breached, incorporates the DoD reporting requirements of this section and the contract, and includes the points of contact of the DoD organisations to be notified for routing purposes.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.