Every core subject matters to every organization, although not every issue does. An organization should therefore go through all the core subjects to find the issues relevant to it, by: listing everything it does; identifying its stakeholders; identifying its own activities and those of organizations within its sphere of influence; working out which core subjects and issues could come up when those activities are carried out under the laws that apply; looking at how its decisions and activities could affect stakeholders and sustainable development, and how stakeholders and issues could affect its decisions; and identifying both issues that arise in daily work and those that arise only now and then. Stakeholders should take part in this, while the organization accepts that an issue can be relevant even if no stakeholder mentions it. Obeying the law does not guarantee that every relevant issue is covered, since some are not regulated, are weakly enforced, or are addressed only by the law's intent. The organization should then set criteria for judging which issues matter most (how much the issue affects stakeholders and sustainable development, what acting or not acting would lead to, how concerned stakeholders are, and what society expects of responsible conduct), and should generally treat as significant any breach of the law, conflict with international norms, possible human rights abuse, practice that threatens life or health, and practice with serious environmental effects.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.