Decision criteria, including risk criteria, are reviewed before the assessment starts. They can be descriptive, banded or numeric, or may not exist, in which case stakeholders rely on judgement. The criteria to review cover how acceptability of risk will be decided, how relative significance will be set, how risk will be weighed in decisions on options each carrying several risks of positive or negative effect, and how relationships between risks will be handled.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.