A third party to whom reporting is outsourced may report one major incident affecting several financial entities in a single aggregated notification or report only where the incident originates from or is caused by a third-party ICT provider serving more than one entity or a group, each covered entity has classified it as major, all covered entities are in one Member State and supervised by the same competent authority, and the competent authority has explicitly permitted aggregation for that type of entity. Significant credit institutions under the SSM, trading venue operators and central counterparties must report individually. On request of the competent authority an entity must submit an individual notification or report.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.