The organisation establishes, implements and maintains procedures documenting how it will prevent, mitigate, prepare for, respond to and recover from undesirable or disruptive events, including the health and safety of its own people, those it protects and others affected, and the continuity of its contracted services.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.