Agencies whose vulnerability or incident response procedures deviate from the playbook may use them only after consulting the Director of OMB and the APNSA and demonstrating that the procedures meet or exceed the playbook's standards.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.