The framework should require where the level and type of risk require it, monitoring by IRM of front line units' compliance with their limits, ongoing communication with them on adherence, and reporting of concerns to the CEO and the board or risk committee, at least quarterly (monitoring and reporting in G.3 to G.5 more often as the size and volatility of risks or material changes require).
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.