The organisation establishes, implements and maintains procedures to identify the undesirable and disruptive events that could affect it, its activities, services, stakeholders and the communities in which it operates, documenting how it will head them off, lessen them and respond to them; its preparation covers detection, warning, escalation, response, communication, continuity of operations and recovery, exercised and reviewed.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.