Training III: training frequency is appropriate to the OFAC risk assessment and profile; the Framework states the program should run periodically and at a minimum annually, with job-specific knowledge, each employee's responsibilities and accountability through assessments.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.