ISO 31000:2018 6.1 is taken over (the preview prints the heading with no added text). The process is the orderly use of policies, procedures and practices to communicate and consult, set the context, assess, treat, monitor, review, record and report risk. It should be part of management and decision-making, built into structure, operations and processes, usable for strategy, operations, programmes or projects, tailored to its setting, alert to human behaviour and culture, and repeated in cycles rather than run once in a fixed order.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.