The review of the risk management framework must at least assess whether the framework is implemented and effective, whether it remains appropriate given the current business plan, whether it remains consistent with the Board risk appetite, whether it is supported by adequate resources, and whether the risk management strategy accurately documents the key elements of the framework that give effect to the strategy for managing risk.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.