Where PPE is used to control risk, the business must provide it (unless the worker genuinely chooses to supply their own and it is adequate), ensure it is suitable for the hazard and the work, sized and fitted to the wearer and reasonably comfortable, maintained, repaired or replaced so it keeps minimising the risk, and actually worn or used by the worker, and must give the worker information, training and instruction in its proper use and storage. A worker must use PPE as instructed and report damage or defects, and other persons at the workplace must wear the PPE provided.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.