The organization should act on its own initiative: assess risks and adjust the response so it works better, foresee how incidents may develop and use resources well, decide early enough for decisions to take effect when they are needed, get on top of the incident early, start a joint response rather than waiting for another party to do it, establish what information needs to be shared, and inform and direct the parties involved, for example so that new resources are built up.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.