Exposure is quantified and monitored within a risk-based framework that supports downstream decisions. Baseline: documented procedures for risk recording, loss estimation, exposure controls and limit monitoring; exposure measured against limits regularly; simple high-level reporting; stress and scenario tests in line with Solvency II including Lloyd's Realistic Disaster Scenarios; regulators told in advance of issues or missed deadlines; for non-natural perils also routine assessment of exposure from prior years' policies (the back book) and of emerging risks. Higher levels add controls linked to appetite and underwriting, breach governance, additional scenarios designed around appetite and own view of risk, and forward-looking controls and real-time reporting.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.