The institution knows and complies with the regulatory expectations and requirements of the regulators in the jurisdictions where it operates, keeps its IT policies, procedures and controls current and consistent with regulatory obligations including IT-related ones, and includes checks of IT-related regulatory compliance in its compliance testing programme.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.