Monitoring and assessing resilience is how an organization notices early signs of a developing issue, or of an opportunity, that needs attention; missing those signs reduces the chance to act before the impact is felt and makes mitigation more expensive. The organization should use the monitoring methods and processes it already has to evaluate the attributes that make it resilient, check how effective its risk management initiatives are (including those run by its established management disciplines), consider surveys of customers and employees as indicators of resilience, and understand what data a resilience assessment needs and make sure an evaluation process provides it.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.