The RSE licensee must maintain an up to date risk appetite statement covering its business operations and each category of material risk, approved by the Board.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.