The threshold is met where the incident lasts longer than 24 hours, or service downtime exceeds two hours for ICT services supporting critical or important functions.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.