Clause 5, the longest at six pages with Figure 1 on developing resilience, gives the guidance on building resilience across the organization: aligning risk management, business continuity, crisis management, security and other disciplines, breaking down silos, engaging with suppliers and partners, and embedding adaptability and learning, which the 2015 advisory summarises as anticipate and monitor, prepare and align, respond and recover, and learn and adapt. The clause text is not held.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.