The RSE licensee must notify APRA within 10 business days when it becomes aware of a significant breach of or material deviation from the risk management framework, or discovers that the framework did not adequately address a material risk.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.