RAMS activities are managed on decisions derived from risk: risks are identified, requirements derived and measures implemented to avoid or control them, and residual risks after the measures are judged against risk acceptance criteria; the risk evaluation and acceptance criteria rest on the system definition (7.3), with the safety criteria defined per 6.3 and 7.4, and risk understood as the combination of expected frequency and severity of loss (human, property, environmental, or RAM loss).
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.