Responsibility assigned to senior executives with authority, independence from management, direct access to the board or audit committee and resources matched to size, complexity and risk.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.