The organization identifies the internal and external factors, connected to its purpose, that affect whether its anti-bribery system can achieve its intended outcomes. As a minimum it considers: its size and structure and who holds delegated decision-making authority; the locations and sectors where it operates or expects to operate; what its activities are, how large they are and how complex; its business model; the entities it controls and the entities that control it; its business associates; the nature and extent of its dealings with public officials; and the legal, regulatory, contractual and professional obligations that apply to it. It also determines whether climate change is among these relevant factors. An organization controls another where it directs that organization's management, directly or indirectly (A.13).
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.