Data availability arrangements should match the timescales of the business continuity programme, which may mean additional storage or alternative locations, while keeping the data secure and confidential; where a third party stores the data, access procedures should be in place.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.