Every insurer covered by the Act keeps a risk management framework that helps it identify, assess, monitor, manage and report on its material and relevant risks; a framework maintained by the insurance group that covers the insurer's operations satisfies the duty.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.