The FI should analyse the potential impact and consequences of the identified threats and vulnerabilities on its business and operations, considering financial, operational, legal, reputational and regulatory factors, and establish criteria for measuring likelihood and impact of risk scenarios so that technology risks can be prioritised.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.