The asset owner reviews and approves the results of the risk assessment and the CRS, which records acceptance of the residual risk before design proceeds.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.