Independent risk management, which oversees the bank's risk-taking and assesses risks and issues independently of front line units, should identify and assess on an ongoing basis the bank's material aggregate risks and use those assessments to fulfil (c) and (d) and to decide whether to strengthen risk management or reduce risk.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.