The organization should set up mechanisms for reporting and communicating internally (ISO 31000:2018, 6.2) so that key components of its legal risk system are communicated at the appropriate time and level, and a connection between those mechanisms and other risk information sources so that information flows properly both inside and out to external stakeholders; when it communicates or reports externally it should preserve confidentiality, legal professional privilege and attorney-client privilege or their equivalents.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.