The organization should consider external factors such as legal and regulatory requirements, sector specific requirements and agreements, competition, globalization, social, economic, political and cultural conditions, technology advances and the natural environment, and internal factors such as size and complexity, activities and processes, strategy, types of products and services, performance, resources, competence and organizational knowledge, maturity and innovation. Drawing on its past, its present situation and its strategic direction, it should determine which issues create risks or opportunities, have top management decide which to address and start the processes needed, and keep up a routine for tracking, reviewing and evaluating these issues and acting on the consequences.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.