The board sets expectations for management's business continuity reporting, regularly monitors continuity and resilience activities and provides credible challenge; management reports in writing on the BIA, risk assessment, BCP, resilience, exercise and test results, identified issues, strategy updates, audit results and key risk and performance indicators, the board is updated in a timely manner on lessons learned, and board minutes record the discussion, challenge and approvals.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.