Management evaluates the likelihood and impact of potential disruptions, taking account of the geographical area, the threats to third-party service providers and natural, technical, malicious, international and low-likelihood high-impact events, uses the assessment to identify, measure and mitigate exposures to the critical functions the BIA identified, and develops risk treatment strategies including acceptance and transfer within the entity's risk appetite.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.