The organization puts in place non-financial controls to manage bribery risk in areas that include procurement, operations, sales, commercial dealings, human resources, legal matters, mergers and acquisitions, and regulatory activities; a single transaction, activity or relationship may fall under financial and non-financial controls at once (Annex A.12).
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.