Per FCPA Resource Guide + DOJ Evaluation of Corporate Compliance Programs: compliance programme + risk-based DD on third parties + agents + JV partners + M&A + training.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.