A backup and recovery procedure sets targets, frequency, method and process; restore tests are run regularly to confirm completeness and accuracy; and backup media holding important information are stored offsite at a physically separate location against disasters (PIPA Article 29; Standards for Securing Personal Information Article 11).
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.