The B/D's business continuity plan includes scenarios for loss of the provider's services and of third-party-dependent capabilities, testing of that part of the plan is coordinated with the provider, the provider's own continuity plans are inspected where possible, and the provider is asked to show that its management actively supports those plans and reviews them periodically.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.