Where a business associate presents a bribery risk above low, procedures call for the organization, so far as it practicably can, to obtain the associate's commitment to prevent bribery connected with the transaction, project, activity or relationship concerned, whether committed by the associate, in its name or to its advantage, and to secure the right to terminate the relationship if such bribery happens. Where one or both cannot practicably be obtained, that fact is weighed when assessing the risk of the relationship (4.5, 8.2) and when deciding how to manage it (8.3 to 8.5).
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.