The Chief Risk Officer must be independent of business lines, other revenue generating responsibilities and the finance function, and must not be the Chief Executive Officer, Chief Financial Officer, Appointed Actuary or Head of Internal Audit.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.