Principle 2 expects the bank's three lines to keep looking, on a continuing basis, for outside and inside threats and for weak points in people, processes and systems, to assess quickly how exposed each critical operation is, and to treat the risks in line with the resilience approach. The operational risk function does this jointly with the other functions whose work touches critical operations, and the bank joins up continuity planning, third-party management, recovery and resolution planning and its other risk frameworks so that together they strengthen resilience.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.