The organization should determine the resources IRBC needs, including the roles, responsibilities, competencies and authorities of the people involved, and top management should appoint a senior person accountable for the IRBC policy and its implementation and for running and maintaining the IRBC management system.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.