Top management shows leadership by: making sure the anti-bribery policy and objectives are set; building the system's requirements into business processes; making sure the resources the system needs are available; talking about the policy inside and outside the organization; explaining why effective anti-bribery management and conformity matter; making sure the system delivers what it is meant to; steering and backing people so that it works; fostering a suitable anti-bribery culture; driving continual improvement; backing other roles in leading bribery prevention and detection in their areas; encouraging use of the reporting channels to raise concerns (8.9); guaranteeing that nobody suffers retaliation, discrimination or discipline for good-faith or reasonable-belief reports of actual or suspected breaches, or for refusing to take part in bribery even if business is lost, unless they took part in the breach; and reporting to the governing body at planned intervals on the system and on allegations of serious or systematic bribery.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.