The NBFC-AA must have adequate internal mechanisms to review, monitor and evaluate its controls, systems, procedures and safeguards, maintain the integrity of its IT systems at all times and take every precaution against records being lost, destroyed or tampered with.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.