Assigning services to a cloud provider does not transfer the company's responsibilities: it remains fully responsible for the assigned service under the applicable legislation and Central Bank instructions. The company notifies the Central Bank when it contracts with any cloud provider; defines its own continuous supervisory and monitoring duties over the service and makes sure its staff are trained, skilled and resourced to supervise and test it; and secures an unrestricted right, agreed in advance, to visit the provider's business premises.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.