The firm tracks its running exposure to operational risk against its risk appetite and tolerance for disruption, and keeps communication and coordination procedures that tell every relevant part of the firm about those exposures.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.