The organisation should evaluate, analyse and rank the insight that its performance management system produces, and should use that system to track progress and to set improvement priorities, plans and actions that are informed, responsive and based on evidence. It should manage and improve processes across the whole organisation, and individual projects along with the overall portfolio, applying lean and agile principles for efficiency and quicker adaptation. An enterprise risk system should identify risks, their likely impact and the mitigations needed across cultural, reputational, financial, legal, regulatory, operational, societal and technical angles, including IT and cyber exposure. It should anticipate how disruption would hit critical areas using predictive technology, foresight work, wargames, disaster recovery exercises and pre-mortems, and should embed continuity plans for several scenarios into its culture.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.