In deciding whether a cloud service is material the institution considers at least the nature and criticality of the services and IT assets; what a confidentiality breach, failure or disruption would mean, directly or indirectly, for the institution and for its customers, including its ability to meet legal and regulatory requirements and to keep operating and serving customers; the share of total operating cost the services represent; how hard it would be to find or migrate to another provider or bring the services in house; the potential effect on earnings now and ahead, on solvency, liquidity, funding, capital and the risk profile; and whether internal controls and regulatory compliance could be sustained if the provider suffers an operational failure.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.