Requirement 0055 (Part Two: Risk, section 8.3 Contingency Planning; applies to All entities; dated 31 October 2024; retained from Release 2025): A business continuity plan is developed, implemented and maintained to respond effectively and minimise the impacts of significant business disruptions to the entity's critical services and assets, and other services and assets when warranted by a threat and security risk assessment. The plan sets procedures to continue or recover services with minimal disruption and contingency actions, complementing the security plan.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.