The NRA needs general regulatory competencies (public health, analysis, communication, information handling, crisis management) and device-specific knowledge (the regulatory system, standards and harmonization, QMS, device technologies), even when it relies on others. It should recruit and retain competent staff, map training needs, set and annually review individual training plans, formally select, train, approve and assign staff for reviews, audits, market surveillance and enforcement, keep evidence of their competence, and draw on expert committees, CABs, WHO, regional centres of excellence and other regulators, with confidentiality agreements and declarations of interest for external experts.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.