The board approves the business continuity policies and the program annually, senior management establishes and implements the policies, procedures and responsibilities for the enterprise-wide program, management documents, maintains and periodically tests the plans and backup systems against interruptions, disasters and intrusions, and reports to the board annually in writing on the status of the program and the results of testing.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.