The team lists the types of incident it can address and the level of support for each, explains factors that change support (workload, completeness of information) and their impact, gives the default support for incident types not listed, and states whether it will act on vulnerability information that creates opportunities for future incidents (an optional proactive policy, not a core requirement).
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.