The project shall assess the risks, and the rewards, that flow from the hazards and opportunities it identified: judge each hazard's risk from its evaluated level against the tolerability criteria; judge the benefit each opportunity offers and note in the AAR the commitment to foster it; rank how important each risk, reward and requirement is; decide what to do about each risk and potential benefit, dealing first with whatever is most pressing and writing those priority decisions into the AAR; work out how to bring prioritised risks down, or rewards up, to an acceptable level by functional, procedural or operational means; put mechanisms in place that keep children away from those parts of the product or service unsuited to them; confirm with stakeholders, children included, that the measures are acceptable; and record the outcomes and the treatments in the AAR. Whatever is prioritised for treatment gets reviewed for technical or procedural measures, and whatever is classed accept or own gets monitored and reassessed at suitable intervals.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.