Risks should be watched and kept under control for the whole project by repeatedly identifying, assessing and treating them; the project should be run in the knowledge that risk is always present; staff should be encouraged to foresee, spot and report risks; risk management plans should be kept ready to use; and reports on risk monitoring should form part of progress evaluations.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.