Effective oversight calls on the governing body to: require its delegates to report promptly and accurately on every material aspect of how the organization is managed; make sure an internal control system is in place, made up of financial controls together with systems for managing risk and compliance; take corrective action; and satisfy itself that the reports and evidence it receives are accurate and that the internal control system works.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.