Guidance to identify, plan, carry out and keep control of the processes that set up and sustain business continuity management in line with the relevant clause 4 requirements and that carry through the actions decided under 6.1, building them into business processes so they stay managed and effective. Controls cover how the processes are identified, planned, carried out and kept under control (for instance an implementation plan and an agreed method for introducing and keeping business continuity management); how control is exercised as decided (for instance by project stages with set deliverables); and keeping documented information that shows the processes ran as intended. Planned changes are controlled, unplanned ones reviewed with suitable action, and outsourced processes and the supply chain kept under control.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.