Report regularly to stakeholders on risk management policies and how well they achieve their aims, including non-financial performance such as community affairs, human rights, employment, health and safety and environment. A methodical approach protects stakeholders, lets the board set strategy, create value and track performance, and keeps management controls working. Formal reporting arrangements should be clear and available to stakeholders and cover the control methods and management responsibilities, the processes for identifying and addressing risks, the primary controls over significant risks and the monitoring and review system, together with any significant deficiencies and the steps taken on them.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.