Appoint two sufficiently senior Responsible Individuals accountable for all legal and regulatory compliance, each a full-time employee, fit and proper, UAE resident or passport holder and approved by VARA; validate this annually with a record, and obtain VARA approval before changing them (or notify immediately in unforeseen circumstances with a continuity plan).
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.