People working under the organisation's control know the security operations policy, how their work helps the SOMS succeed and the benefits of improved performance, the implications of not conforming to its requirements, and their personal responsibilities under the law, human rights standards and the codes of conduct and ethics that bind them, including the duty to report incidents and nonconformities.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.