Continuity plans are tested, the way each test ran is reviewed, and the plans are improved with what was learned. Tests take in the dependence of core business lines and critical operations on third parties, and wherever it can the firm joins the recovery and continuity tests of the third parties behind those operations and lines.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.