The organisation assesses the nature and extent of its internal and external exposure to bribery by associated persons, periodically, informed and documented, with top-level oversight, adequate resourcing, identified information sources, due diligence enquiries and accurate documentation of conclusions, updated as the business evolves, for example on entering new markets (MoJ Principle 3, paras 3.1 to 3.4).
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.