People outside the organisation who are affected need what the workforce needs: the facts, a grasp of the threats to them, practical information and assurance about the response. Within privacy and legal limits, external communications should express concern, regret and care; give credible, accurate and trusted status updates; show leadership through ownership and control; explain that the incident is being investigated with the organisation's support; provide access for information and support, such as media and relatives contact numbers; reassure the public, customers and suppliers without over-reassurance that puts people at further risk; explain how the business will be affected while acknowledging support received and demonstrating resilience; and avoid promises, accusations or suggestions, sticking to facts, all seen from the outside-in perspective of those affected. Where the local community is devastated, communications should show the organisation fulfilling its social responsibilities as a member of that community, engaging in relief with its workforce, and should empathise with and recognise the volunteers it may depend on in the early stages.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.