The reference model lists the roles of all actors involved in its activities, and these are the only values ASCs may use for their role, responsibility and required qualification attributes. The organisation is strongly recommended to use the standardised list of roles in ISO/IEC 27034-5 so ASCs can be shared between teams and with other organisations.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.