The organisation establishes a whistle-blower policy under which anyone acting for it who reasonably believes that the standard, the law or human rights have been breached can report to the organisation and, where appropriate, to the client or authorities; it takes no adverse action against anyone for making a report in good faith, protects their identity where possible, and tells the client when a report alleges a breach of the law or of respect for human rights.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.