While settling on the organization's values, the governing body should see to it that every relevant stakeholder is involved, that the ethical conduct the values call for is clear, that such conduct can be assessed, that the governing body grasps what unethical conduct, including bribery, fraud and corruption, can lead to, and that corrective action is possible (values may be set out in a code of conduct, a code of ethics or a compliance policy). Once they are set, it should make sure they are visibly lived and actively used in decisions, rely on them to shape how the purpose is pursued and the value generation objectives met, and keep responsibility for monitoring and reviewing them and checking they still fit the purpose; how well they work shows in the organization's culture.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.