Management identifies and analyses the risks that could stop the organisation achieving its commitments and requirements (Guide 2.191).
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.