The organisation monitors and reviews its procedures and improves them where needed, responding to changes in risk and to triggers such as government changes in operating countries, incidents or negative press, using internal financial controls, transaction monitoring, staff surveys, questionnaires and training feedback (MoJ Principle 6, paras 6.1 and 6.2).
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.