Guidance to decide beforehand how business as usual will be restored after a disruption and to have documented procedures for moving the business from the stop-gap arrangements used during the incident back to normal running, with suitable audit and governance requirements. Recovery aims to bring business activity back to a level that sustains normal operations, whether by repairing the damage, by returning from temporary premises to the repaired main site, or by moving somewhere new, the best course depending on how bad the damage is and how long it is expected to take to rebuild the capacity needed. The procedures call for a thorough assessment of the situation and its effects and for setting out the tasks and stages of recovery, during which the organization may need to build up recovery resources and infrastructure; work from recovery facilities; restore damaged facilities; arrange emergency buying and funding; restore equipment at damaged facilities; claim under its insurance; take on extra labour for the recovery; choose recovery and return-to-normal options; move operations into recovery facilities; restore lost documented information; keep affected interested parties informed at a suitable frequency; bring operations back to normal at the restored facilities; review what happened after recovery; and confirm that audit and governance requirements have been met. The recovery procedures state the conditions for restarting every activity, not only the prioritized ones, so that lower-priority activities are brought back in due course and their resource needs met.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.