Top management should approve the ICT continuity plans and the Final MBCO, decide on the risk treatment or acceptance for any objective not met, ensure the resources IRBC needs are provided, review the IRBC arrangement at planned intervals for its continuing suitability, adequacy and effectiveness, and ensure the governance of 6.2, the integration with BCM of 6.3 and 6.6, and continual improvement from the learning of 11.3 are in place, so that ICT readiness is owned at the level that carries the consequences of its failure.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.