The entity is required to carry out a business impact analysis that assesses how disruption could affect its operations, its reputation and market share, its capacity to operate or its relationships with key stakeholders, and that identifies the resources and capabilities that disruption might call for.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.