The management review should be fed with the information top management needs to judge IRBC, such as audit and exercise results, incidents, performance against the readiness criteria, the status of actions, and changes affecting ICT or business continuity requirements.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.