Before a material cloud service proceeds, the board receives a comprehensive report covering compliance with the guideline and with the institution's own cloud strategy and policy; the governance and assurance frameworks, including audit, testing and review arrangements; the risk assessment; the due diligence on the provider and on the data location; the respective responsibilities and accountabilities of the institution and the provider; the adequacy of security controls on premise and in the cloud; the arrangements for business continuity, for exit and for the event that the Bank revokes the licence or appoints a conservator; the internal resources and training plans for deployment and oversight; the measures that let the institution meet its regulatory and legal obligations and access its IT assets on the cloud; and the Bank's rights in respect of its supervisory powers.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.