Member States shall encourage reporting through internal channels before external reporting where the breach can be addressed effectively internally and the reporting person considers there is no risk of retaliation; entities shall provide information on the use of internal channels.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.