The governing body should oversee how the organization performs, so that it lives up to what the governing body intends and expects of it, behaves ethically and meets its compliance obligations.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.