IRBC should be reviewed and monitored regularly so that it keeps supporting the organization's BCM requirements: changes should be assessed so that upgrades or improvements do not weaken resilience, any merger or acquisition due diligence should assess resilience, and the decommissioning of ICT components should be reflected in the IRBC arrangements.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.