Control: manage incidents in coordination, as appropriate, with the relevant parties both within the organization and beyond it. Purpose: to give incident management the coordination it requires. Guidance: incidents that cross organizational lines happen often and a single carrier seldom solves them alone, and new threats using many attack techniques and reaching widely make coordination across organizations more pressing than before. Coordinate with internal parties (business, administration, IT and any other departments needed) and with external ones (specialist cybersecurity organizations, outside incident response teams, law enforcement and the authorities concerned).
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.