Management commitment II: senior management delegates enough authority and autonomy for the compliance unit to apply its policies so they control OFAC risk, with direct reporting lines and routine, periodic meetings between the SCP function and senior management.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.