The operational risk function examines the core business lines and critical operations of the firm and its material entities, works out how much exposure the firm has to the operational risks it faces now or expects, and judges how well the firm could recover from a disruption.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.