An incident response procedure covers reporting, what must not be disclosed and incident handling, and sets out the responsibilities and steps of both customers and the provider.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.