The regulator may object to a proposed controller within the statutory assessment period, or approve subject to conditions, per s 187 and s 189; a firm and the controller must comply with any conditions imposed and must not treat silence past the assessment period as implicit if the regulator has validly extended it.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.