A reporting entity must review its ML/TF risk assessment whenever an independent evaluation report contains adverse findings about that assessment, and must do so as soon as practicable after its governing body receives the report.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.