The entity is required to set procedures and policies that coordinate its work on prevention and mitigation, on preparedness and response, and on continuity and recovery.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.