A good risk management process identifies hazards and assesses risks, uses controls to eliminate or minimise risk, monitors and reviews controls, and consults genuinely at each stage. Before starting know the legal duty to consult workers and HSRs throughout, identify who needs to be involved (managers, workers, human resources, HSRs, subject matter experts), explain the process to everyone and decide how the process and its outcomes will be recorded and communicated.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.