The business expectations for IRBC begin with a review of the risks to ICT services, drawing on the risk assessment of 6.4 and the threat and scenario sources of 6.1, to establish which failure modes (the manner in which a failure is observed and its effect on the operation of the system, term 3.1) could deny ICT services to prioritised activities and therefore what IRBC must be ready for; Annex B gives a risk reporting layout for failure mode and effects analysis.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.