The governing body should set governance policies that: make clear what it intends and expects regarding the purpose, values and value generation objectives; make delegations clear, including for the strategy process; define governance structures such as committees and the roles within governance, with their authority, responsibilities, performance and reporting expectations; direct what is to be achieved rather than prescribing how responsibilities are carried out; set expectations on internal control, compliance, risk management and risk-taking; explain how the governing body itself works and governs; address how the governing body itself commits to keep improving; and are reviewed and revised regularly so they stay consistent with the constituting documents, the changing context and relevant guidance such as standards and codes. It should make sure the policies are applied effectively and achieve what it intends, that its delegates are empowered to draw up consistent management policies and to suggest changes to governance policies, and that it is clear who develops and who approves policies, with governance policies unchangeable without the governing body's consent.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.