The company must assign each part of the due diligence process to accountable staff, give a senior person authority to oversee it, train responsible employees (at induction and by refresher), provide adequate resources, ensure policy, processes and risk information reach employees and suppliers, report actual and potential risks to the appointed senior manager, hold senior management accountable, and keep records of how senior management took risks and assessments into account in decisions.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.