Business continuity management is the process of implementing and maintaining the organization's capability to continue delivering its products and services at a capacity set in advance and within tolerable timescales while a disruption lasts (ISO 22313). Within it, IRBC is the process that improves the organization's readiness to react to an ICT risk landscape that never stops changing, to ensure continuation of the ICT services that support prioritised activities, to foresee, and ready a response to, an ICT service disruption ahead of time on detecting events that become incidents, and to deal with, and recover from, ICT incidents and failures. The organization decides its BCM priorities, from which the IRBC activities follow, and BCM in turn depends on IRBC to meet its objectives for keeping ICT services going at all times, above all during disruption. The readiness objectives that follow from this are to get better at detecting incidents, to prevent sudden or drastic failure, to allow service to degrade to an acceptable level where a failure cannot be prevented, to shorten recovery time further, and to limit the consequences when an incident does occur.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.