The organisation can enact the response plan, limit impact on essential functions and base decisions on timely information. Achieved: needed resources and information are understood and arranged, responders have the skills, knowledge and authority to act, key roles are duplicated and delivery knowledge shared, backup mechanisms allow continued (possibly reduced) operation if primary systems fail, and external specialist responders can be brought in.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.