The body must employ, or have access to, enough people to cover its operations across the schemes it runs and the standards or other normative documents it applies. The people must be competent for what they do, including the technical judgements the process requires, the policies they define and the way they carry those policies out. The duty covers people who work for the body, people on individual contracts and people under a formal agreement that places them inside the body's management control and procedures. Everyone, including committee members, people from external bodies and people acting for the body, must treat as confidential everything it obtains or creates while certifying, except where law or the scheme requires disclosure.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.