The organization puts in place financial controls to manage bribery risk; Annex A.11 offers examples, among them keeping the person who initiates a payment separate from the person who approves it, graded approval levels, and limits on the use of cash.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.