The organization should define how the ICT business continuity plan is activated: the criteria and triggers (term 3.8) that justify activation, drawn from the monitoring and incident processes of 7.1.2 and 6.5, who has the authority to activate, how the decision is recorded and communicated, and the initial actions that follow activation, so that activation is a decision taken quickly by the right person rather than an argument held during the incident.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.