Strategies to lessen, respond to and manage the harm from disruption can include insurance, which may pay back part of some losses but never every cost (uninsured risks, brand, reputation, stakeholder value, market share, human harm) and works best beside other solutions, because money alone neither protects the organization nor satisfies interested parties; recovering assets, through standby contracts with firms that clean or repair damaged assets; and managing reputation, through sound warning and communication capability and sound incident communication procedures. Guidance: look for ways to make disruption less likely, shorter and less damaging, in line with the risks found and the organization's general stance on risk. Where a hazard beyond the organization's control, such as an earthquake or flood, could seriously disrupt it, the organization, where suitable, sets strategies and puts in place solutions that limit the likely harm, finds out which outside body monitors that hazard, contacts it to learn how it issues notifications, and checks those arrangements against its own needs.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.