The risk management framework must include forward looking scenario analysis and stress testing programs proportionate to the size, business mix and complexity of the institution and built on severe but plausible assumptions.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.