The internal context is substantially within the organization's control through its governing and management systems: the nature of the legal entity; financial health and business model; internal legal structure and governing processes and functions; governance and value structures that foster integrity, for example compliance guidelines and a code of conduct; the current state of legal matters and the approach to managing legal risk; awareness campaigns and systems that improve behaviour and deter fraud, such as compliance management systems; past disputes and legal-risk events; owned assets including intellectual property and other legal rights; rights and obligations under contracts; duty-of-care obligations; the way indemnities, warranties and non-reliance clauses can set one another off; liabilities over tax, labour, environmental and similar issues arising in mergers, acquisitions and disposals; the internal legal risk policy; and other legal-risk information and resources.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.