Where an institution within the group that is not an APRA regulated institution engages in business activities that may pose a material risk to the group, the Head of the group must ensure the risk management framework addresses the risks that entity poses to the group and to depositors, policyholders or RSE beneficiaries.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.