Management sets and monitors objective standards to measure risk in development, acquisition and maintenance on an ongoing basis commensurate with size and complexity, using automated tools as complexity grows, with measures such as estimated against actual completion dates, the number and age of open project issues, the percentage of code backed out of production, cost overruns beyond established limits, service levels below contract, unapplied or late patches and policy exceptions.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.