ISO/IEC 20000-1 (8.7.1 and 8.7.2) covers service availability and service continuity management, two areas of interest to security, but with no particular requirements on integrity or confidentiality, so existing activities should be reviewed to see whether they can usefully be extended to those properties. Availability as ISO/IEC 27000 defines it is not the same as service availability, and service continuity is only part of business continuity. An organisation integrating the systems should understand both the differences and the mutual support between the disciplines when applying continuity and availability concepts; ISO/IEC 27001 Annex A has controls on keeping information secure during an adverse situation in which the continuity plan is invoked and controls on availability.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.