Board and senior management together make sure that resilience work is led and staffed by people with the right expertise, that budgets and resources are adequate and approved, and that a culture of effective risk management is encouraged.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.