Because a recovery plan holds sensitive information it is protected as carefully as a system security plan would be, and the organisation evaluates containment principles that wall off business resources which have no need of close integration with key resources, for example keeping production workstations used for internet browsing and email away from managing key assets.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.