Guidance that, in working out what the BCMS needs, the organization secures enough people and what goes with them (time to carry out BCMS roles and duties; training, education, awareness and exercising; managing BCMS staff); premises, with suitable workplaces and infrastructure; ICT systems, including software that helps run the programme well; the means to manage and control documented information in every form; means of communicating with interested parties; and money and budgets. What is provided, and how it is shared out, is reviewed from time to time to confirm it is enough, and it can be fitting for top management to take part in that review.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.