Entities under Article 16(1) must document and implement an ICT project management procedure covering projects from initiation to closure with defined roles, and an ICT change management procedure ensuring every change to ICT systems is recorded, tested, assessed, approved, implemented and verified in a controlled way with safeguards for digital operational resilience.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.