Identical in substance to IS.I.OR.230: a reporting system meeting Regulation (EU) No 376/2014 where applicable; incidents and vulnerabilities that may represent a significant risk to aviation safety reported to the competent authority, and to the design approval holder or the organisation responsible for the design of an affected system or constituent; a notification as soon as known, a report in the authority's form within 72 hours unless exceptional circumstances prevent it, and a follow-up report on recovery and prevention actions as soon as identified.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.