Institutions must publicly disclose the information required by Part Eight. The management body or senior management must adopt formal disclosure policies and maintain processes, systems and controls to verify that disclosures are appropriate and compliant, and at least one member must attest in writing that the disclosures follow those policies and controls; the attestation and the key policy elements are part of the disclosures, which receive the same internal verification as the management report. Policies must also assess whether disclosures convey the risk profile comprehensively. Non-material, proprietary or confidential items may be omitted, with the stated reasons, except that the management body diversity policy, own funds and remuneration disclosures may not be omitted as immaterial, and own funds and remuneration disclosures may not be omitted as proprietary or confidential.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.