The entity is required to set up and use procedures for responding to, and recovering from, the effects of the hazards identified under 5.2.2.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.