The RSE licensee must ensure at a minimum that its risk management framework covers all material risks to its business operations, both financial and non financial, having regard to the size, business mix and complexity of those operations.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.