The bank defines system performance, recovery and business resumption metrics, including RPO and RTO, for all critical information systems, and risk-based metrics for others.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.