Front line units, accountable to the CEO and the board for assessing and managing the risks of their activities, should, alone or with a unit that assists them, establish and adhere to written policies including front line unit risk limits (II.F) that ensure the unit's risks are identified, measured, monitored and controlled consistently with the risk appetite statement, concentration risk limits and the enterprise policies of II.C.2.(c) and II.G to II.K.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.