The organization should establish a test and exercise programme that schedules tests and exercises across the critical ICT services and plans, sets their frequency by criticality and rate of change, progressively increases their scope and realism, assigns responsibility, and ensures every plan and every solution the plans depend on is proven within a defined period.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.