Ensure that I&T-related risk does not exceed risk appetite and tolerance, and that impact is identified and managed.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.