RICS-regulated firms must record and retain how they have met the standard; must hold identity documents and address details securely and no longer than the anti-money laundering retention period strictly demands; must issue written terms of reference to any outside provider performing compliance checks for them (the firm stays responsible for suspicious activity reporting); and must understand newer asset types such as digital currencies, and any offer of payment in digital currency should go to the firm's nominated reporting officer (a 'should').
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.