The organization has to put in place the controls that make the records processes consistent across the organization. The annex names four: metadata schemas for records, business classification schemes, access and permissions rules, and disposition authorities. Each control is a rule set with an owner and a maintenance route. Without them, capture depends on individual habit, search depends on file names, access depends on folder structure and disposal depends on who remembers the retention period.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.