The operational risk function runs, and keeps current, methods for identifying and assessing risk that take in the firm's business processes and the operational risks attached to them, technology and third-party risk included.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.