Introducing new countermeasures changes how operations are run, so it is carried out through the organization's management system, which makes sure enough resources are provided, effects on other operations are managed, and management backs the change.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.