In business and service activities network operators must comply with laws and administrative regulations, respect social morality and business ethics, act in good faith, perform their cybersecurity protection obligations, accept supervision by the government and the public and bear social responsibility (Article 10). Anyone who constructs or operates a network or provides services through one must, under the laws, administrative regulations and the mandatory requirements of national standards, take technical measures and other necessary measures to keep the network secure and stably running, respond effectively to cybersecurity incidents, prevent illegal and criminal activity on the network, and maintain the integrity, secrecy and availability of network data (Article 11). These are the general duties that the specific obligations of Chapter III and the Article 61 penalties give force to.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.