Risk assessments identify security risks arising from political, economic, civil or social factors, recognising that some personnel and assets are more exposed, so the company can reduce risk and judge whether its own actions may increase it.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.