The organization should control the documented information of IRBC, plans, procedures, strategies, contact lists, test records and reports, so that it is available where and when needed including during a disruption when normal systems are down, is current and version-controlled, is protected from loss and unauthorised change, and is retained as evidence.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.