The elements of business continuity management (Figure 5) are: operational planning and control (8.1), an essential part led by a responsible person appointed by top management; business impact analysis and risk assessment (8.2), through which the organization evaluates the impact a disruption would have on the supply of its products and services, sets recovery priorities, understands the risks of disruption to those prioritized activities so it can manage them, and derives the parameters for its strategies and solutions; business continuity strategies and solutions (8.3), whose identification and evaluation lets the organization find solutions to reduce risk and mitigate the consequences of disruption to prioritized activities and to overcome disruption when it occurs, the selected solutions resuming products and services at acceptable capacity within agreed times; business continuity plans and procedures (8.4), which let the organization manage disruption and continue operating on the basis of its business continuity requirements, with a response structure defining the teams responsible (8.4.2) and plans and procedures for warning and communication (8.4.3), incident response (8.4.4.2.2) and recovery (8.4.5); the exercise programme (8.5), which validates the effectiveness of the solutions, plans and procedures and also raises awareness and competence, keeps plans complete, current and appropriate and improves business continuity; and evaluation of business continuity documentation and capabilities (8.6), through which the organization confirms that its business continuity management is effective and achieves its objectives.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.