The selected solutions should be implemented and maintained over time; once solutions are selected management should be involved in choosing the resources needed for business continuity, such as workspace, equipment and materials, and care should be taken to ensure the resources are available during an incident; to ensure the recovery and mitigation strategies are in place the organization should determine and implement all solutions needed before a disruption occurs, and where the time to bring a solution into operation would exceed the business continuity requirements it should implement the selected solution in advance of any disruption.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.