The risk management function monitors implementation of effective data risk-management practices to keep risk within the organisation's risk appetite, evaluates control effectiveness, and reports findings to management with recommendations to improve policies.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.