The company makes all arrangements needed to keep its business running if the assigned services suffer a disaster, failure or sudden interruption. At least it sets continuity and disaster recovery plans and tests them with the provider, agreeing at contracting the provider's continuity requirements and liabilities, the recovery time and recovery point objectives among them; makes sure its crisis management team fully understands the recovery plan for provider disasters; assesses the likelihood and impact of an unexpected interruption on its continuity; keeps backups of data and software at an alternate site and tests their restoration; and documents a contingency plan naming a substitute provider and the arrangements to follow if the current contract ends suddenly or the provider cannot meet its commitments.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.