What does 5c require?

Scenarios are designed from the mapped connections and dependencies of core business lines and critical operations, third-party risks included, as recorded in the recovery or resolution plans, and from the relevant business impact analyses.

US Interagency Sound Practices to Strengthen Operational...

Other controls in Section 5 Scenario analysis (practices a to e) – US Interagency Sound Practices to Strengthen Operational Resilience

5a Operational risks from risk management, audit, continuity and resolution planning incorporated into severe but plausible scenarios designed to test the tolerance for disruption
5b Governance framework and independent review of the integrity and consistency of scenario development
5d Back-test scenarios against past severe disruptions and refine them from the results
5e Identify risk transmission channels, concentrations and vulnerabilities across critical operations and core business lines, informing the tolerance for disruption

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpoint All US Interagency Sound Practices to Strengthen Operational Resilience controls