Because the scope fixes which sites, products and services, activities and resources the BCMS covers, a change bearing on the BCMS is inside the scope even if the statement never names it (a manufacturer that puts a product in scope thereby includes buying its raw materials, processing, delivery and every support function behind it, for example purchasing, HR and data processing, at each site that directly or indirectly helps supply it). Guidance: an exclusion must not weaken the organization's capacity to satisfy the continuity requirements its business impact analysis produced; no activity, resource or supply chain that in-scope products and services rely on may be left out; each exclusion is recorded with a reasoned justification; and where the BCMS sits inside an existing management system, the organization checks that no BCMS element is lost.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.