Implementation starts once top management has approved the IRBC strategies: the plans, procedures and organizational structure behind them are put in place, with training and awareness, and the work is managed as a project through the formal change control and BCM project controls so that progress is visible and reported. Standards for intrusion detection (ISO/IEC 18043), incident response (ISO/IEC 18044) and disaster recovery services (ISO/IEC 24762) should inform the detection, response and recovery components.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.