The Board must qualify the risk management declaration where there has been any significant breach of or material deviation from the risk management framework or the requirements of Attachment A, and any qualification must describe the cause and circumstances and the steps taken or proposed to remedy the problem.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.