For anyone hired or engaged in a role that touches the AML/CTF obligations, the policies must require an assessment, at the start and periodically afterwards, of whether the person has the capability their AML/CTF responsibilities demand and whether they are trustworthy.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.