Prioritise the most significant (most salient) risks and impacts for action by severity (scale, scope, irremediable character) and likelihood where not everything can be addressed at once, then move on to less significant ones; demonstrate a credible prioritisation process, engage stakeholders including workers and unions on it, and communicate the rationale; account for domestic legal obligations and for risks that enable others.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.