The firm satisfies itself that each third party runs sound risk management and controls that find and reduce hazards to operations, and that those are consistent with the firm's tolerance for disruption.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.