The NBFC-AA must form a Risk Management Committee, at Board or executive level, of at least three Board members, which weighs reputation, customer confidence, consequential impact and legal implications when deciding investment in controls and security for systems, networks, data centres, operations and backup, and oversees technology risk, ensuring the IT function can support the business strategy.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.