Risks across the organisation must be found and written down, assessed with the help of clinical and other datasets, reduced, and the whole risk system periodically tested and improved; risks must be reported to staff and consumers; and plans for internal and external emergencies and disasters must exist and be managed.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.