Guidance to choose continuity strategies by how far they let prioritized activities return at agreed capacity within the times the impact analysis set, how well they fit the risk the organization is willing or unwilling to carry, and whether their benefits come at a controlled and acceptable cost; all solutions are revisited when operations change. Solutions to stabilize, continue or resume prioritized activities can cost too much, and then the organization either picks acceptable alternatives that still serve its continuity objectives or treats the products and services concerned as BCMS scope exclusions under 4.3.3. Where a threat is judged highly improbable or shielding against it costs too much, the organization can choose to carry the risk and look at it again as part of evaluating BCMS performance, and carrying it can likewise lead to taking the products and services concerned out of scope.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.