Develop a contingency plan that identifies essential mission and business functions and their contingency requirements, sets recovery objectives, restoration priorities and metrics, assigns contingency roles with contact details, provides for maintaining essential functions through a disruption, compromise or failure and for full restoration without loss of the planned controls, addresses the sharing of contingency information and is approved by the agency head or designee; distribute it to contingency and incident response personnel, coordinate it with incident handling, review it annually, update it for organisational, system or environmental change and for problems met in use or testing, communicate changes, incorporate lessons learned into testing and training, and protect the plan from unauthorised disclosure and modification.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.