Guidance to decide, product by product and service by service, which parts of the organization belong inside the BCMS and which can be left out (for instance covering just the supply of certain products to one country or region, leaving out products that are no longer competitive or of little value, or covering only the organization's own kinds of product and service), and to describe products and services precisely enough that every activity, resource and supply chain behind them can be traced; the scope can also say what size or severity of incident the BCMS is meant for and how it fits the business strategy and the approach to managing risk.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.