Important data, applications and settings are backed up to a defined schedule on secure, resilient storage that is encrypted and protected by immutability, offline storage, logical isolation or an equivalent control; backup repositories are kept apart from user environments and production so they cannot be reached, altered or erased without authorisation; and backup and restore procedures are tested regularly to prove they work and meet the recovery time and recovery point objectives. Marked across the technical domains.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.