An organization may cause adverse impacts, or contribute to them, through their own practices, their supply chains and the design, use or disposal of what they buy; potential adverse impacts identified in the supply chains should be prevented or controlled and actual ones treated, remediated or controlled; the organization should put a due diligence process in place and answer for it.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.