Management, with operations and human resources, ensures thorough applicant screening and background checks at hiring and periodically during employment at a frequency matching the sensitivity of the position, defines duties, responsibilities, expectations and accountability to limit turnover, implements dual control and segregation of duties so no one person performs a complete process, independently monitors activities so nobody validates their own or a superior's work, rotates duties for cross-training and succession, and where segregation is hard in a small entity uses rotation as a compensating control with close supervisory review.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.