The regulator may withdraw an approval if it is no longer satisfied the individual is a fit and proper person to perform the function, per s 63; a firm must act on a withdrawal by removing the individual from the function and must itself revisit certification and fitness decisions for related roles.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.