Management reviews and updates the business continuity program regularly to reflect the current environment, prompted by changes in strategy, products, services and infrastructure, changes at third-party providers and deficiencies in their continuity, new legislation and practices, operational metrics and early warning indicators, budget variances, exercise results and lessons learned, changes in the threat landscape and audit, vulnerability and penetration test recommendations; program personnel regularly ask business unit managers about changes to business, structure, systems, personnel and facilities, and the program is reviewed for accuracy and completeness at periodic intervals.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.