On a risk basis, run a security and human rights approach in line with the Voluntary Principles (the multi-stakeholder principles on security and human rights), which includes working out which vulnerable groups are or could be affected in their human rights, and how.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.