Under the information security programme the organisation develops and implements the recovery processes that restore affected capabilities in a timely way, combining recovery guidance and a playbook with major phases and stages, each stage having clear exit criteria (stakeholder notification, for instance) with the specific technical procedures expected during recovery, automating procedures as far as possible to cut errors in the difficult operating conditions of a recovery.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.