The company must seek long-term relationships with immediate suppliers, confirm they commit to an Annex II-consistent policy, communicate its policy and risk expectations to them, write disclosure duties and policy compliance into contracts in a monitorable way, consider building supplier capacity, support EITI principles, design measurable improvement plans with suppliers (involving governments, international bodies and civil society where relevant) when mitigating risks, require suppliers to run know-your-supplier screening including sanctions checks of owners, avoid or document cash transactions, and monitor supplier performance against agreed expectations.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.