The product can be recovered when its data, hardware, software or site configuration is damaged or destroyed, giving reasonable assurance that persistent settings and stored health data can be restored after failure or compromise so business continues. The necessity and steps of periodic backups are documented, the confidentiality and integrity of backups are validated periodically and checked at installation, and the restore time meets the organisation's recovery goals, with the service management standards' continuity planning and testing as references.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.