An incident is major for DORA Article 19(1) where it has affected critical services under Article 6 and either the data loss threshold for successful, malicious and unauthorised access in Article 9(5)(b) is met or two or more of the other materiality thresholds in Article 9 are met.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.