The organization must define the competence needed by people whose work affects system performance, make sure those people are competent through education, training or experience, and take action to close gaps, checking whether that action worked. Documented information must show the competence.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.