The organization sets and applies policies on corporate responsibility, which as a minimum comprise a policy against bribery, a code of conduct for employees, and a policy for escalating ethics concerns (whistle-blowing).
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.