The organization should decide which communications, inside and outside, the framework calls for: what to communicate (the policy, the process, the channels, outcomes where appropriate), when, with whom (personnel, business associates, regulators, the public), how and who, and should communicate the policy to business associates and other interested parties whose conflicts can affect it.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.