The FI should ensure personnel, including contractors and service providers, have the competence and skills to perform IT functions and manage technology risk. Because insider threat (theft of confidential data, sabotage of IT systems, fraud by staff, contractors or service providers) is a recognised risk, background checks should be performed on personnel with access to the FI's data and IT systems.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.