Within the risk management programme due attention should go to finding and mitigating the threats to people, with their probability, impacts and dependencies, surfaced by the impact analysis and the risk process, recognising that how people react to disruption is hard to foresee. Top management should bring the workforce into identifying threats, both to capture a wide range of views and to build risk awareness. Mitigation strategies seen from the people side should respect every legal, regulatory, ethical and moral requirement, including recognising that there could be casualties and preparing to manage them efficiently with engagement of affected families and long-term psychological support; managing a changing business environment that can affect terms of employment, roles, availability and skills; and preparing for the effect on the workforce of external events such as natural disasters, terrorism, infectious disease, cyber-attack or disruption to utilities or transport.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.