A firm must identify its important business services and set an impact tolerance for each, specifying the first point at which disruption would threaten its safety and soundness, UK financial stability (for O-SIIs and the largest insurers) or, for insurers, policyholder protection, expressed as a length or point in time plus any other relevant metrics.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.