Incident management should take account of facilities, equipment, people, organizational structure, procedures and communications together, recognising that some management functions must be performed in every incident however many people are available or involved; the organization should put incident management in place, comprising a process for managing incidents (5.2) and an incident management structure that sets out roles and responsibilities, tasks and how resources are allocated (5.3), and should document both.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.