Management documents the issues found in exercises and tests with action plans and target dates, analyses results against the objectives and success criteria and reports them to the appropriate level, documents accepted risks for items not remediated, retests corrective actions for failed recovery objectives or major issues before or at the next exercise, updates the BCP and the testing program, reports regularly to the board on whether the plan meets the recovery and resilience objectives, records dates, locations, an executive summary, deviations, problems and lessons learned with assigned responsibility, and analyses results for common root causes.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.