IT systems should be designed for availability commensurate with business needs, with redundancy or fault tolerance where high availability is required. The FI should periodically review its system and network architecture for weaknesses, mapping internal and external dependencies to find single points of failure, and test regularly that resilience still meets business requirements; continuously monitor resource utilisation (processor, memory, storage, network throughput, latency, packet loss) against thresholds for capacity management; and have procedures for when thresholds for resources or performance are breached.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.