Proportionality Principle. Section IV requires that the operational cyber risk management framework be proportionate to the nature, scale and complexity of the RLE's business and its cyber risk profile.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.