Top management establishes, and where there is one the governing body approves, a conflict-of-interest policy that suits the organization's purpose, states what a conflict of interest is for the organization and the duty and timing of disclosure, sets out how conflicts are assessed and resolved and by whom, encourages concerns to be raised in confidence without fear of reprisal, explains the consequences of not declaring, and commits to improving the framework. The policy is kept as documented information, communicated within the organization and made available to relevant interested parties. Depending on the organization, it can also address specific areas such as gifts and hospitality, outside interests, related parties and moves after leaving employment.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.