Leadership (business owner or executive management) establishes risk appetite and strategy, approves the content of the six foundational components, and oversees the function to confirm it operates as designed.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.