If the organization has a governing body distinct from top management, that body demonstrates leadership of the anti-bribery system by: approving the anti-bribery policy; keeping the organization's strategy aligned with the policy; receiving and reviewing information about the system's content and operation at planned intervals; requiring that adequate and appropriate resources are allocated and assigned for the system to operate effectively; and exercising reasonable oversight of how top management implements the system, what it achieves and how effective it is. Where no distinct governing body exists, top management performs these tasks; ISO 37000:2021, 4.2.3 says more about the two roles.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.