Maintain, test and update annually a business continuity and disaster recovery plan covering triggering events such as cyber incidents and technical failures and their assessment, resources, recovery priorities for essential data and functions, internal and external communications, validation of data integrity after disruption, escalation and transfer of functions, an alternative site, and remediation of exploited vulnerabilities, addressing virtual-asset-specific issues such as network malfunction, data integrity loss, key storage and authorisation layers.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.