The organization should identify and document the ICT services critical to its minimum business continuity objective, each with its own RTO and RPO, listed with a short description and a name the business recognises; review each service's documentation in both its normal and its continuity environment; assess, from a prevention angle, the current continuity capability against the risk of disruption or degradation; and identify opportunities to strengthen resilience, reduce likelihood or impact and enable early detection and reaction, deciding whether there is a business case to invest in them.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.