The body must have arrangements that cover the liabilities its operations can create. Insurance and reserves are the examples the standard gives, but the test is whether the cover matches the scope and the markets served. The body must also have the financial stability and the resources needed to run its operations. A certificate is a continuing promise, so the question is not only whether the body can pay a claim today but whether it can keep surveillance, decisions and records going for the life of the certificates it has issued.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.