A firm must regularly test its ability to remain within impact tolerance for each important business service across an appropriate range of adverse circumstances of varying nature, severity and duration relevant to its business and risk profile, proportionately to its activities.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.