Reporting persons qualify for protection where they had reasonable grounds to believe the information reported was true at the time of reporting and fell within the scope of the Directive, and they reported internally/externally or made a public disclosure in accordance with the Directive.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.