Before entering any cloud outsourcing arrangement a firm assesses whether it concerns a critical or important function, identifies and assesses all relevant risks of the arrangement, performs due diligence on the prospective CSP that fits the arrangement, and identifies and assesses any conflict of interest the outsourcing may cause.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.