The organization should clearly define the roles and responsibilities of all personnel and the operating procedures to be used, and designate one or more persons responsible for determining incident management objectives, identifying legal and other obligations, starting and coordinating every incident management measure and answering for them, establishing the organizational structure taking span of control into account, assigning tasks, and activation, escalation, demobilization and termination.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.