The insurer must have a risk appetite statement that articulates the aggregate level and types of risk it will assume within its risk capacity to achieve its financial and strategic objectives and business plan, takes into account all relevant and material risk categories and their interdependencies in its current and target risk profiles, and is operationalised in business strategy and daily operations through a more granular structure of risk limits.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.