Principle 6 expects response and recovery plans for incidents that could disrupt critical operations, kept within risk appetite and tolerance for disruption and improved continuously from the lessons of earlier incidents. The bank keeps a current inventory of the internal and external resources it can call on for response and recovery.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.