The organization should set the objectives of IRBC from the business continuity requirements of clause 7: the minimum business continuity objective, the recovery time objective and the recovery point objective for each critical ICT service, and the readiness outcomes the organization expects, stated so that strategies can be selected against them and tests can measure them.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.