The FI should test its disaster recovery plan regularly to confirm systems meet recovery objectives, with business and IT stakeholders taking part; test plans should state objectives, scope, scenarios, scripts, recovery procedures and success criteria; tests should cover plausible disruption scenarios including full and partial loss of the primary site and major system failures, and recovery dependencies between assets including those managed by third parties; and where service providers manage information assets, the FI should assess their DR capability, ensure arrangements are established, tested and verified, and test coordinated recovery steps with them.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.