The teams and expertise meet business needs including strategic projects, regular deliverables and research. Baseline: staff responsible for exposure management have enough experience for their role, resourcing meets regulatory deadlines, and where operations are outsourced the managing agent keeps responsibility for understanding the risk. Higher levels add understanding of model limitations, external support for strategic projects, identified key person dependencies, specialist non-natural expertise (for example cyber or casualty teams), research capacity and succession planning.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.