A firm must scenario test its ability to stay within tolerance for each important business service across an appropriate range of adverse circumstances of varying nature, severity and duration, on a regular basis, after material changes to its business, services or tolerances, and after improvements made following a previous test; it remains responsible for testing done with or by third parties.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.