People are a control. The FI determines what competence and conduct it needs from those who build, deploy and use AI, recruits the talent, and trains and supports employees so that they have the skills, knowledge and culture both to use AI appropriately and to manage its risks; human, technological and financial resources are allocated in proportion to the risk profile of each use case and its systems or models. Regular reviews confirm that the people developing, deploying and maintaining AI have the capability and the capacity for effective risk management, and the capability-building programmes themselves are reviewed so that they stay current and teach the risks of newer AI technologies.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.