Records policies are written down and put into effect, flowing from what the business is trying to achieve and backed by working rules or procedures. They are informed by business context and records requirements, aim at authentic, reliable, useable records with integrity for as long as required, state their scope, applicable standards and audit requirements and the business activities covered, address the termination of business processes (decommissioning systems, migration, disposition), and define where laws, regulations and standards affect records. They are authorised at an appropriate level, promulgated, assigned an owner, reviewed at a stated interval, and superseded versions are retained as records.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.