Risk aggregations are governed and overseen. Baseline: an established risk framework including catastrophe risk and exposure management; board and senior management regularly discuss material issues; high-level independent and internal review; exposures and model output reviewed against Lloyd's thresholds, with Lloyd's approval sought for any actual or foreseeable exceedance. Higher levels add a specific exposure management framework, second or third line review, board understanding and challenge of models, regular exposure committees and targeted deep dives.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.