After approval the company applies proportionate vigilance (sharing its code of conduct, training the third party, written anti-corruption undertakings or termination clauses, encouraging checks on subcontractors), keeps full visibility of payments to and from third parties with finance alerting compliance to abnormal payment terms (cash, payment to another party, change of bank to a non-cooperative or embargoed jurisdiction), sets a renewal date at onboarding, re-evaluates on significant change such as a new beneficial owner or merger, tracks evaluation and renewal indicators, and keeps the full evaluation file and change history for five years after the relationship ends (paragraphs 241 to 250).
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.