Assign a risk designation to every organisational position, establish screening criteria for the individuals filling them, and review and update the designations as required.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.