The organization should revisit and refresh each supplier's agreed continuity requirements (4.2.2), at contract review and renewal and when the BIA, the risk assessment or the supplier's circumstances change.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.