The organization should determine the time frames for developing the ICT continuity plans, for reporting on their status and on incidents, and for testing them, so that plans exist before they are needed, their state is visible to management, and testing recurs at a frequency matched to the rate of change in ICT and to the criticality of the services.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.