The organization sets anti-bribery objectives at the functions and levels where they are relevant. The objectives are consistent with the policy, measurable where practicable, reflect applicable requirements, are monitored, communicated and revised as necessary, are held as documented information, and can be achieved. In planning how to meet them, the organization determines what is to be done, what resources are required, who is responsible, the date by which each is to be met, how the results are to be evaluated, and who is to apply sanctions or penalties.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.