IT disaster types that threaten continuity of core services (natural disaster, telecom or power failure, hacking) are identified and their damage and business impact analysed to identify core IT services and systems; recovery time and recovery point objectives are set by importance; and a disaster recovery plan covers recovery strategy, emergency recovery organisation, emergency contacts and recovery procedures (Standards for Securing Personal Information Article 11).
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.