The entity is required to set up and use a process that gives every relevant stakeholder a shared frame of reference for the kinds of incident that could harm people, property, operations or the environment; that frame is to be used across incident management.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.