A business must manage the risk of an object falling and striking a person, and where reasonably practicable prevent the fall of objects; where prevention is not practicable it must minimise the risk by providing adequate protection, for example a system to arrest the fall or to prevent objects from falling freely, or an exclusion zone with a safe way to raise and lower objects.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.