Management integrates the AIO functions into the business continuity management program, designs, implements and operates systems and processes for the resilience of critical business activities against cyber and physical attacks, persistent threats and deceptive combined attacks, determines its reliance on people, processes, technology and third parties, builds resilience (redundancy, layered defence, resilient backups) and security (vulnerability and attack detection) into the architecture from the start, may use asset management activities to demonstrate resilience, recognises the different design risks of cloud co-location, and provides levels of resilience proportionate to the criticality of systems and software.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.