Backups allow recovery of lost data, with frequency and retention set by internal rules and procedures covering frequency, on-site and off-site storage and access controls; R1 tests restores regularly; R2 keeps at least one copy separated so one incident cannot affect original and copy.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.