Independent risk management, which oversees the bank's risk-taking and assesses risks and issues independently of front line units, should establish and adhere to enterprise policies that include concentration risk limits and state how aggregate risks are identified, measured, monitored and controlled consistently with the risk appetite statement and the processes of II.G to II.K.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.