A Coordinated Vulnerability Disclosure procedure is designed, and published, following the NCSC guideline or else NEN-EN-ISO/IEC 29147:2020, and information from CVD reports is included in the incident report.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.