Front line units, accountable to the CEO and the board for assessing and managing the risks of their activities, should, alone or with a unit that assists them, assess on an ongoing basis the material risks of its activities and use those assessments to fulfil (b) and (c) and to decide whether to strengthen risk management or reduce risk as the unit's risk profile or conditions change.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.