The group risk management function need not sit with the Head of a group and may be located elsewhere in the group, but the group Chief Risk Officer must not hold any of the roles that a Chief Risk Officer is barred from holding for any institution within the group.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.