Every notification and communication under section 40 also communicates the name and contact details of a point of contact where more information can be obtained, describes the likely consequences of the breach, and describes the measures taken or proposed to address the breach including, where appropriate, measures to mitigate its possible adverse effects.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.