Identify the organisation's exposure to uncertainty methodically, from close knowledge of the organisation, its market and its legal, social, political and cultural environment and of its strategic and operational objectives and critical success factors, so that all significant activities and the risks and volatility flowing from them are found and categorised. Activities may be classed as strategic (for example capital availability, sovereign and political risk, legal change, reputation, physical environment), operational, financial (credit, foreign exchange, interest rates), knowledge management (intellectual property, power failures, technology, system failure, loss of key staff) or compliance (health and safety, environment, consumer and data protection, employment, regulation). Outside consultants can help, but in-house ownership with consistent, well-communicated processes and tools is essential.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.