The organisation must develop measures for the unacceptable risks identified under 205, implement them in a timely manner and check that they remain effective; the measures must let it control the circumstances that contribute to the threat scenario occurring, reduce the consequences for aviation safety if it materialises, or avoid the risk, and must not introduce new unacceptable safety risks. The responsible person under 240(a) and (b) and other affected personnel must be informed of the risk assessment outcome, the threat scenarios and the measures, and the organisation must inform interfacing organisations of any risk shared between them.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.