Much of the recovery planning is done before any event: the systems central to the mission that must be recovered first are identified and assessed in advance so that assets and security dependencies are understood and correctly prioritised in the recovery guidance and playbooks, and threat modelling groups data, applications and systems by priority and criticality into a functional and security dependency map used by the risk, incident response and recovery teams.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.