Turn the impact and risk findings into chosen continuity solutions. The process takes the prioritized activities, their recovery requirements and the risk assessment as input, identifies candidate strategies and solutions, selects them with a recorded rationale traceable to the findings, determines the resources each needs, and implements and maintains them in a state where they can be activated. Its outcome is a set of solutions the organization has actually built, resourced and maintained, not a strategy chosen before the analysis and justified afterwards.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.