The provider must give annotators security training covering the relevant laws and regulations, annotation task rules, use of the annotation platform or tools, quality verification, security verification of annotated content and annotation data security management; must assess annotators and grant annotation qualifications only to those who pass, with periodic retraining and reassessment and a mechanism to suspend or withdraw qualifications when needed; and must divide annotation roles into at least annotation execution and annotation review, with the same person never performing both on the same task.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.