The organization should build up and assign resources, for example people, premises, technology, finance and information, so that vulnerabilities are dealt with and it can adapt as circumstances change. It should give priority and resources to: making sound decisions on resourcing, capacity, diversification, replication and redundancy, so that no single failure can bring it down and it can respond to incidents and change while keeping core services at an acceptable level decided in advance; recruiting and developing employees whose varied skills, knowledge and behaviour let them respond and adapt to change; building the capacity to spot change and respond flexibly, reshaping and redeploying its structures, capabilities, activities, arrangements and behaviour to fit new conditions; and reviewing routinely whether resources are suitable, available and well allocated as the organization and its context change.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.