A person who causes, instructs, induces, aids or permits another to do an act unlawful under Division 1, 2, 2A, 3 or 6 is taken also to have done it (s 122). Conduct by directors, employees or agents within their actual or apparent authority is attributed to the body corporate or person, unless it took reasonable precautions and exercised due diligence to avoid the conduct (s 123), so organisations need preventive systems to rely on the defence.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.