Document a management structure setting roles, authority and accountability; staff it with suitably qualified people chosen through a Board-approved process in the constitutional documents; senior management acts under Board oversight within law and Board policy, may sit on the Board (except the compliance officer and head of internal audit), needs Board approval and conflict screening for outside directorships or employment, and supplies the Board with information for an annual performance assessment.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.