The organisation develops and disseminates an organisation-wide privacy program plan describing the program's structure and resources, its requirements and management and common controls, the role of the privacy senior official with the deputy head's delegation and other privacy roles, management commitment, compliance requirements and strategic goals, and coordination across entities, approved by a senior accountable official; and updates it at a set frequency for changes in privacy law, jurisprudence, policy and the organisation and for problems found. Canada-specific addition: the plan is communicated and available to the personnel implementing it. No enhancements. Deployed organisation-wide in the medium profile.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.