The competent authority must have a person with authority to establish and maintain the structures, policies, processes and procedures that implement the Regulation, with authority to access fully the resources needed and the delegation of power to perform the duties; processes ensuring sufficient personnel on duty, their competence and their acknowledgement of assigned responsibilities; and the appropriate establishment of the identity and trustworthiness of personnel with access to systems and data in scope.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.