Management ensures the resources for resilience: an accessible off-site repository of software, configuration settings and documentation, appropriate data backups and off-site infrastructure to run recovery systems, plus the space, systems and personnel capacity to assume or transfer failed operations in the short term; discusses disaster scenarios with third-party providers, assesses critical providers' susceptibility to simultaneous attacks and verifies their resilience, and lets business strategy rather than technology drive resilience across physical, cyber, data backup and replication, personnel, third-party, telecommunications, power and change management dimensions, with emergency personnel designated down to critical process level.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.