Undertakings test their BCPs and the operation of critical processes/functions/assets and interdependencies (including provider-supplied) regularly based on the risk profile; update BCPs from testing results, threat intelligence and lessons learned; demonstrate the plans sustain business viability until critical operations are re-established at a predefined level; and document results, analysing, addressing and reporting deficiencies to the AMSB.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.