To plan and execute recovery the organisation maintains a reliable inventory (a configuration management database for a large organisation, at minimum a list) covering the people, the processes and the technology that enable its mission, including external partner assets connected to its resources, together with all dependencies among them, and considers how hosted services such as cloud computing affect its capabilities; business impact analyses, service and operational level agreements and dependency maps with a focus on security dependencies inform it.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.