The FI must set a recovery time objective of no more than 4 hours for each critical system (the time from disruption within which the system must be restored) and must validate and document at least once every 12 months how it performs system recovery testing and when the RTO is validated in that testing. Documentation is kept for supervisory request, not submitted (FAQ).
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.