The team states the basis of its authority (from the organisation's management for an organisational team, or support by the community, usually advisory, for a community team), distinguishes the scope of its control, meaning whether it may intervene in systems, from the perimeter of its constituency, identifies other CSIRTs operating hierarchically within its perimeter, and seeks legal advice because disclosing its authority may expose it to liability claims.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.