Clause 6 gives a maturity model for organizational resilience (Figure 2) and a set of questions to determine whether an organization's resilience measures are consistent with the standard (Figure 3), so that an organization can assess itself against the guidance rather than claim compliance with it. The clause text is not held.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.