Keeps a service's availability and performance at an adequate level if disaster strikes. It gives a framework for resilience and an effective response that protects what key stakeholders care about as well as the organization's brand, reputation and the work through which it creates value, and supports business continuity management by getting IT and services back within agreed times after a disaster or crisis, invoked when an event is too large for ordinary incident management. It works with the recovery time objective and recovery point objective, disaster recovery plans spanning the four dimensions, and business impact analysis that finds the vital business functions, what they depend on, and what recovery they require. Leaders set risk appetite, scope, policies, supplier approaches and spending on recovery options; plans and mechanisms are kept under review and improved; stakeholders receive assurance that the organization is ready; products and services are built and tested to meet continuity requirements; bought-in components are required to satisfy them; and operations follow continuity policies.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.