Management remains responsible for risk in every outsourcing relationship and maintains a risk management process for initiating and overseeing all outsourced operations that makes senior management and the board aware of outsourcing risks, confirms each arrangement is prudent and consistent with business objectives, assesses needs systematically with risk-based requirements, implements controls for identified risks, monitors for changes in risk from the initial assessment, and documents procedures, roles, responsibilities and reporting, through risk assessment and requirements definition, due diligence, contract negotiation and implementation, and ongoing monitoring.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.