The Governing Body is responsible for seeing that the institution's IT strategies line up with, and serve, its business strategy, consistent with its role in setting business objectives; senior management answers to the Governing Body for implementing the IT strategy so it supports the business, and the Governing Body gives senior management the authority and resources to do so. A system or dataset that does not fit its purpose exposes the institution to more risk than intended.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.