Control measures must be maintained so they remain effective, including being fit for purpose, suitable for the nature and duration of the work and set up and used correctly. Decide what maintenance a control needs when it is put in place and set a schedule of routine checks. A risk register can record the hazard, the action needed, who is responsible and the due date.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.