Operational resilience is overseen. Foundational: board and senior management ownership; monitoring through the risk framework and control environment; understanding of external communications and of escalation and remediation needed before an impact tolerance is breached. Higher levels add defined committee reporting, review of scenario plans beyond twelve months, operational resilience impacts in incident reporting, an accessible self-assessment for board challenge and senior accountability for changes.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.