The governing body provides human and financial resources proportionate to the risk profile (compliance team, external advisers, tools for third-party evaluation, alerts, risk management, monitoring and e-learning, training management, periodic reporting). It may delegate operational deployment to a compliance officer appointed by a mission letter setting out duties, independence through position and access to the governing body, board and committees, links with other functions and resources; the officer must have access to all useful information, independence and real influence, direct regular access to management, involvement in strategic decisions (major contracts, mergers and acquisitions, investments, partnerships, new products), relevant skills, and reports on activity; groups name a central officer with local referents (paragraphs 97 and 101 to 112).
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.