Accessible, secured, current backups of data and information needed to recover essential functions are held. Partially achieved: secured backups of data, configuration, software, equipment, processes and knowledge that remain accessible after an extreme event including ransomware, routinely tested for usability. Achieved: comprehensive, automatic, tested technical and procedural backups secured at central or secondary sites, with all important data backed up, tested, documented and reviewed.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.