The business impact analysis of the business continuity process is the input that sets IRBC's targets: it identifies the prioritised activities, the ICT services they depend on and the time frames within which those services must be recovered, and IRBC should take its requirements from it rather than from ICT's own view of what matters.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.