Entities under Article 16(1) must test their business continuity plans and scenarios at least yearly for backup and restore procedures and on every major plan change, showing they can sustain the business until critical operations are restored and identifying deficiencies; results must be documented and deficiencies analysed, addressed and reported to the management body.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.