An organization should accept that respecting the rule of law is compulsory. It should: obey the law in every jurisdiction where it works, even where laws and regulations are poorly enforced; make sure its relationships and activities fit the legal framework that applies and its intent; stay informed of every legal duty it has; and review from time to time whether it is complying with the laws and regulations that apply, taking steps to know which laws apply and to tell people in the organization that they must observe and apply them.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.