Because the organization carries a duty of care towards many people inside and beyond it, what every relevant party needs and requires should be weighed when the BCMS is set up. Guidance: name every party with a stake in the BCMS (Figure 4 lists public and private sector examples running from suppliers, customers, owners, regulators and emergency services to employees, their families and neighbours); turn each party's needs and expectations into requirements, catching those that are only implied as well as those stated or mandatory; and decide which actions suit each party, treating them differently, since telling every party something after a disruption may be right while involving all of them during implementation may not.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.