A licensee must have adequate arrangements and systems to ensure compliance with its s 47 obligations and a written plan documenting them, and, unless regulated by APRA, have adequate financial, technological and human resources to carry on its credit activities and supervise, and adequate risk management systems.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.