The Controlled record type boxes have the title, Defect records above them. The Security context has the title Customer A record above it. Below the Security context box is an arrow pointing toward a Group A record. Below the Group A record are two boxes labeled User, both with arrows pointing toward the Group A record.