The organization should maintain the external contacts and procedures the plans need: suppliers and cloud providers with their incident and support routes, emergency services, regulators and authorities that must be notified, customers and partners that depend on the services, and insurers, with the procedures for contacting each, the information they need, and the authority to release it.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.