ISO 31000:2018 5.7.2 is taken over without additions: the framework's fitness, sufficiency and effectiveness, and how well the risk process is built into the organization, are improved continually; when gaps or chances to improve are found, plans and tasks are drawn up and given to named owners who answer for them.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.