For processes in Program 2 or 3, the owner or operator must develop a management system to oversee implementation of the risk management program elements, assign a qualified person or position overall responsibility for their development, implementation and integration, and, where other persons are responsible for individual requirements, document their names or positions and define the lines of authority through an organisation chart or similar document.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.